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FINAL FBI APPROVAL / DETERMINATIONS /CONDITIONS; 


PI A is required by the L-Goverrenem Act 


M PI A it to bo mm pie ted m & matte? of FBlAbOJ d tscref bo. }fc«pf ( . Ibis ■»'! 
o Ousted Routine Database FI A GIsocMisb 

Is FI A to be published on FBLGOV (after any RAID FOIA redactions}? Vest 
security svsnne, the PI A will not be published. 


will be accomplished by completing An I 


X No ■ Because this it; it e&boesd 


IA is not required for the toliosviug reaseriCsX 

System does not collect, maintain. or disseminate Pi!, 

System ss grandfathered (it; existence before 4/17/2003: ru> later changes posing significant privacy 
Information in the system relates to internal government operations. 

_System has been previously assessed under s.n evaluation similar to a PI A. 

No significant privacy issues (or privacy issues are unchanged). 


ApebceNe \L’Rfo\' ■ t.e 5 B'< * «.u • .• IN'ccoN N\ „.e '> ''AS j At-A' , omO A v * s' - s y vs y. at ' c 70 
199 8), as aateeded _%t M Fed Reg l.?2f)0 (Mar .No 3001) nod j>b Fed Reg 29994 1 hose L 2091'}... 

Notify FBI R.N!D/RIDS per MiOG 190,2.3? X No ........Aes-Sge.sample lei OhlPOvtl lutontet website here; 

hftp:Ahoree/DO/Oe)C/DrB/PCf,D/PrlvaeyCivi!9020f,tbcrtica%20Libraty/R>r5n jbr ei log 190-2-A eo,svpd 


SOR.N/SORN revisiOnCs) rec.ui.red? X No 


Prepare/rev ise/add Privacy Act (e)(3) statements Par related leases? No Yes 


I Ri LORDS, fhe program shocks consult oath RMf> to identify. w\olve any Federal raw seK dec town records 4 Issues, The 
| systern may contain Peoenusreeords whether or not It contains Privacy Act requests and, in any event a records: schedule 
j approved by the National Archives and Records Administration Is necessary, HMD ears provide advice on this as well as cat 
1 cosopliarsoe with requirements tor Licet tonic Recordkeemna Certification and my necessary- uodat.es. 
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I, INFORMATION ABOU T THE SYSTEM / PROJECT 


Provide a general description of th e system or project that t»d«4est faf 
Mi of the sysiem/project, mektding associated acronyms: fh) structure of 
tlm sysiemfprojeet, tnehsding imereooaeeimos with other projects or systems; 
jo) purpose of the sysiem/project; (d) oafore of the mformation m the: 
system/project and him*' d mM hr used; (o) who red! have access to the 
IsBormsttoo m the systeodprojeet: (!) and the maimer of troosmEsloo to ad 
users. 
















































































2. Does the systenv’project collect. .maintain, or disseminate am- information about 
individual;; ii a human heirs a or natural oerson, rcaardless of nadmadu v)V 


X YfS- ft# yes, please 

3, Please indicate if any of the Ml owing ohamctefislies apply to the- mfbnymuoxt in the 
system about indivi duals; Bear in mi ad that log-an 'information May identify or be 
linkable to an M 0 ividoai 
(Cheek ail that apply.) 

■ X The iuhttMatlon 41 m oily identifies specific mdivldlafe. 


,i|f...... The inibrrnauou is intended II be used, la conjunction oath other data clcme; 

to indirectly identify- spedHe individuals. 


X The inionnanon can be used to distinguish or trace an individual's Identity (re... 
is linked ta- linkable k> sped lie individuals) 

If you marked any of the above, proceed to Question 4. 

Cone of the above. If none of she above, describe why the odorroation does nor 
idernify .specific individuals either directly or indirectly. 


■'h Does ine systou 
consultants? 


oieet pertain only (o aoveruroeni employees, contractors, o 


X NO 


5.. Is Informationdhmu United States citizens xar lawfixltc admitted permanent resident 
aliens retrieved from the system/projeet by n|be or other personal Identifier 9 

NO flf no, skip to questkm 7j 


.X.Hill I lf yes, proceed to the ne s t |1|1§§1§§§ 

6. Does (he sy$tern- ; pro;eel collect. any information direct? Itorn the person who is (he 
subject of the itrlbrroation? 

_X f:;a | It no, proooect to ours rum /, I 


a. Does the system. project support erlrnirsai, ( d . or i ( i •ovostmaiions or 
assessments'; tiilllillllltililllllllllllllillllllllllll 


BEps^^w^om 
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FBf Privacy Threshold Analysis (PTA) Cover Sheet 




NAME OF SYSTEM: 2257 Pp^graro Pomogmpby Producer/Performer Databases 


FBI SYSTEM CONTACT PERSON 

Name: 


program Office: Violent Crimes Section, Crimes Against Children Unit (2257 Program) 
Division; C1D (hut phy sicall y stationed in th e Los Angeles Dm§i< 

I f cel 1)7_(office) 


Room Number: N/A (physically stationed in the Los Angeles Division) 
Date PTA submitted for approval: 08/24/2007 
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FBI DIVISION APPROVALS. A PIA (and/or PTA) sbouW he prepared/approved by the cognizant program management m 
gdflaborahon withIT, security, and enthuser management and QCC/PCLIT (PiAs/PTAs :rdatlng to electtonicforms/quastionngites; ttt)plica ti ng, 

rbe Paperwork Reduction Act should ai$q be coordina ted with the HMD Forms Desk.) If the subject of a PlA/PIA is under the program 

cognizance of an F8f HQ Divisi on, prior to forwarding to OGC the PTA/Pf A m u$t also be referred to the FBtH(^ Division for program review and 
approveL if required by t he FBI HQ.Division. 



Program UMsiori: (insert division name] 

FBI HQDi visidht €10 

Progra m Manager 
(or other appropriate 

executive as Division 

determines) 

Signature: 

Date signed: 

Name: 

i; Title:-; 

Signat nr 
Datesigj 

Name: 

Title: 

(?:/s/ 

rid: 9/5/2007 

Unit Chief 


DiyiaianPrivacyOfficer 

Signature: 

Date signed: 

Hume: 

Tide;. : 

Signan 

Dare si 

Name: 

Title: A 

ire: /$/ 

gned: 9/5/200' 

SC 



Upon Division a pproval forward signed hard copy plus electronic: copy ro OG:C/PCLU (jEH Room 7338). 


iFIN .AL FBI APPROVAL: : "{** Subject to C&A eonditi on at question AJ< page 4} 


FBf Privacy and Ci vi l Liberties 0ffirer 

Signature: A/ 




Da te Signed: 9/14/f}7 




: Name: 

David C, Larson. 



Title: 

Acting Deputy Genetc 

il Counsel 


Upon final FBI approval FBI OGC will efetuhute as follows: 

1 - Origins I signed copy t o 190- HQT'13217 94 
Copies: 

i - DOj Privacy and Ctytl liberties Office-Main justice. Room 42S9 1 - OGC\PCLU intranet webs^e 

I-FPUXIO T-PCLU library 

1 - FBI SecD (electronic copy via e- mail) 1 - PCLU Tickler 

2* " Program Division ROC /Privacy Officer 
2% FBI HQ Division POC /Privacy Officer 

Cpfease reprod uce as needed for Progra ni/Di vi si on fi le (s)) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM; 2257 Program Pornography Producer/Performer Databases 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) is 
required by conducting and fallowing Privacy Threshold Analysis (PTA) 


A PTA contains basic questions about the nature of the system in addition to a basic system descriprion.The questions are as follows: 


A, General System Description; Please briefly describe; 


1, Type of * rtf or m ati on * n the system: 


The 2257 Program Is responsible for conducting inspections at pornography producers' places of business to ensure their 
compliance with Title IS, United States Code Section 2257 (18 LLS.C §2257) and Tide 28, Code of Federal Regulations Section 75 (28 CRR, Part 
75), The statute and corresponding regulations were enacted in an effort to prevent the sexual exploitation of chiIdren, The statute requires 

that records be kept by producers for certain products made after 11/01/1990, and which contain one or more visual depictions of an actual 
human being engaged in actual sexually explicit conduct. In general, the records required to be maintained by producers of sexually explicit 
material include records related to the verification of a performer $ legal name and date of birth. Under the statute and regulations, producers are 
required to obtain the legal name and date of birth of performers by examining an appropriate picture identification card. Producers must also 
maintain a copy of the picture identification card that was submitted,, if the product was produced after a specified date. Additionally, producers 
have to record any name (other than the performer's legal name) ever used by the performer, including maiden name, nickname, stage name, or 
professional name, and are also required to cross reference performers names with other productions made by that producer in which the 
performer has appeared. The regulations also requi re that producers affix to every product, a statement which provides the name, title and 
business address of the person responsible for maintaining the required records. 

2257 Program field personnel responsible for conducting inspections are currently comprised of two field Supervisory Special 
Agents (SSAs), five retired agents (Contractors") (to he increased to eight contractors in the near future), and one part-time Support Services 
Technician, The producers to be inspected by 2257 Program personnel are randomly selected from a database using a random number 
generator algorithm. The database, named the "2257 Program Pornography Producer Database" (hereinafter "the Producer data base"), will be 
maintained by 2257 Program personnel 

b7E 


On-sire inspections at the producers listed place of business are conducted without advance notice to the producer as designated by 
the regulations. During the inspection, identification documents maintained by the producer are copied or electronically scanned by the 
contractors, and are then compared to —copies of facial photos of performers that were previously printed. A regulatory inspection report is 
subsequently issued disclosing any violations found during the on-site inspection, such as the lack of identification or the use of illegible 
identification. The 2257 Program has also begun to develop a database comprised of the follow!ng information for each performer identified 
during on-site inspections conducted pursuant to 18 LLS.C §2257 and 28 CF.R, Part 75; stage name, true name, date of birth | 

b7E 

This database, na med the ”2257 Program Pornography Performer D atabase" (hereinafter 
"the Performer database") will be maintained by 2257 Program personnel_ 

For information, as indicated above, 2257 Program personnel will obtain digital copies of identification documents (e,g v driver 


I 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM; 2257 Program Pornography Producer/Performer Databases 


licenses, passports, etc) either by obtaining such digital copies directly from the producer during an on-site inspection or by scanning hard copies 


of document^ 


b7E 


a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 

em p I oyee/cQ tmacror information r 


Not applicable. 


Purpose for collecting the information arid how it will he used; 


The Producer database wi II he used to maintain a master list of ail known/suspected producers of pornogra phy, including 
production companies, website addresses, magazine publishers, etc. An algorithm will be utilized to randomly select production companies, 

website addresses, magazine publishers, etc, for inspection by the2257 Program pursuant to 18 U.S C §2257 and 28 CFJT Part 75, 


The Performer database will be used to maintain s master list of performers that 2257 Program personnel can reference for 
information relative to the 2257 Program and inspections pursuant to 18 U.S*C. §2257 and 28 CF;R, Part 75. 


b7E 


3, The system s structure finduding components/subsystems}: 


b7E 


4. Means of accessing the system and transmitting information to and from the system: 

Both databases will be maintained on the same stand-alone computer maintained at the secure 2257 Program offsite in the Los 
Angeles Division, The databases wt!I only he able to be accessed via the stand-alone computer by 2257 Program personnel. The stand-alone 
computer will not: be connected to any externa! system, indudingthe Internet No mass transmission of either database will occur. 


b7E 


| In addition, identifying information for a limited number of performers, including stage name, true name and date of bi rtf y will be 
listed in regulatory inspection reports. 


] b7E 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM; 2257 Program Pornography Producer/Performer Databases 


b7E 


lwithoot having physical access to the entire Performer database, which only 2257 Program personnel will have. 


] b7E 


and ensure the Performer database's compliance with Mi06 190-10 4, while 


still safeguarding the personally identifiable information from access by unauthorized personnel. 


5, Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons can access 

the information; 

Only personnel assigned to the secure 2257 Program offsite In the Los Angeles Division will have physical access to the databases, 
which will be maintained on a stand-alone computer* The stand-alone computer will not he connected to any external system, including the 
Internet For information, the 2257 Program offsite is eurrently located i n the secure Gorman Federal BuiIding, 6230 Van Nuys Boulevard, Van 

Nuys, California, A copy of the databases, or just certain information from the databases, may be provided to authorized personnel from CID, 
Violent Crimes Section, Crimes Against Children Unit, which is responsible for oversight of the 2257 Program, as well as senior FBI management, as 
needed for program oversight. 


__| b7E 

without having physical access to the entire database, which only 2257 Program personnel will have. 

8, Who outside the FBI wit I have access to the information i n the system and controls for ensuri ng that only authorized persons 
can access the information: 

As stared above,, only personnel assigned to the secure 2257 Program offsite in the Los Angeles Division will have physical access to 
the databases. Certain information from the databases may also be provided to authorized personnel from the Department of justice who have 
responsibilities related to the 2257 Program, but they would not be able to directly access the system themselves. This would include Assistant 
United States Attorneys assigned to review regulatory inspection reports or prosecute criminal cases referred by 2257 Program personnel. If there is 
a prosecution related to violations of 18 U.S.C. §2257, information In the database may become relevant to the proceedings and could be disclosed 
as necessary, 

7, Has this system been certified and accredited by the FBI Security Divisions? Yes „X„No 

** Program to contact ISSM to ascertain if C&A required, and if so, initiate process to obtain C&A. -DCL 

8 Is this system encompassed withi n an OMB-300? _Yes _No _XJ3onY Know 

(If yes, please attach copy of latest one.) 


L Was the system developed prior to April 17,2003? 

_YES (if "yes,* proceed to Question 1.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM; 2257 Program Pornography Producer/Performer Databases 
X_ NO (If 'no/ proceed to Section ft) 


1. Has the system undergone any significant changes since April 1 7 , 2003? 


_YES If "yes/ please explain the natu re of those changes; 

{Continue to Question 2,) 

_NO (If 'no/ the PTA is complete and should be sent to FBI OGCs Privacy and Civil Liberties Unit (PCLU) tor review, approval,, and 

forwarding to DO) s Privacy and Civil Liberties Office, Unless you are otherwise advised, no PIA is required) 


2 , 


Do the cha nges involve the collection, maintenance, or dis^ 


semination of information to identifiable form about individuals? 


YES (if "yes/ please proceed to Question 3.) 

NO (If"no/ the PTA is complete and should be sent to FBI OGCs Privacy and Civil liberties Unit (PCLU) for review, approval and 

forwarding to DOfs Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 


3. 1$ the system solely related to internal government operations? 


YES If yes/ is this a Major Information System (as listed on OGC s FBINET website)?; 

_Yes, (If "yes/ a full PIA is requimd„ PTA is complete.) 

_No (It ‘no/ the PIA is complete and should be sent to FBI OGCs Privacy and Civil Liberties Unit (PCLU) for review, 

approval and forwarding to OOfs Privacy and Civil Liberties Office, Unless you are otherwise advised, no PIA is required, 

(FBI and DO} reviewing officials reserve the right to require a PIA.)) 

NO (ff "no/ go to section Hi to determine if a full or short dorm PIA is required.) 


IL For systems developed afte r April 17,2003, 

1. What is the purpose of the system? (Answer in detail unless details al ready provided in A. 2 above); 


Please see the response provided in AX above. 


(Continue to Question 2.) 


Does the system collect, maintain or disseminate information in identifiable form about individua ls? 


X_YES (If yes/ please proceed to Question 3.) Custodian of Records name is "personally identifiable Information/ 


___ NO (If "no/ the PTA is complete and should be sent to FBI OGC s Privacy and Civil Liberties Unit (PCLU) for review, approval, 
and forwa rdi ng to DOf s Privacy and Gvif Liberties Office. Un less you are otherwise advised, no PIA is required.) 


3. b the system solely related to internal government operations? 


YES If /yes/ is this a Major information System (as listed on OGCs FBI NET website)?; 


4 


EPIC-561 









FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM; 2257 Program Pornography Producer/Performer Databases 

Yes. (if "yes/ a full PI A is req wired.. PTA is complete.) 

_No* (If "no," the PTA is complete and should he sent to FBI OGCs Privacy and Civil Liberties Unit {PCLU} 

■for review, approval, and forwarding to DOfs Privacy and Civil Liberties Office. Unless you are otherwise advised* 
no PLA is req wired. (FBI and DQj reviewing officials reserve the right to require a PIA,)) 

X_ NO (If "no/ go to section HI to determine if a f ull or shout-form PIA is required.) 

HL Eu 11 or 5 ho rt-form PI A 

1 Is the system a major information system (as listed on OGCs FBI NET website)? 

YES (if 'yes/ a full PI A is req u 1 red. PTA is co m plete) 

X NO (If ' no/ please continue to question 2.) 

2. Does the system involve routine information AND have limited wse/access? 

X_YES A short-form Pi A is required* (!*«*, you need only answer Questions 1,1* 12 V 2.1,3,1,4*1 f 5.1 (if appropriate)* 6*2. 

6.3, and 8 S of the PiA template.) Please note that FBI and DO) 
reviewing officials reserve the right to require completion of a fu ll 
PIA. (PTA is complete -forward with PIA,) 

_NO (if " no/ a full PIA is required. PTA is complete.) 
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ALL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS UNCLASSIFIED 

DATE 10-24-2014 BY NSICG/C32W33BS1 

FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev.07/06/07) 


NAME OF SYSTEM: 


b7E 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: 

Name: 1 1 

Program Office: ITB 

Division: IT Operations 

Phone: 

Room Number: 8979 

Date PTA submitted for approval: 04/24/2008 

Phone: 1 

Room Number:7338 


FBI DIVISION APPROVALS A PIA (and/or PTA) should be prepared/apprcved by the cognizant program management in 
collaboraticn with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 

the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk) If the subject of a PTA/PIA is under the program 
cognizance of an Division, prior to forwarding to OGC the PTA/PfA must also be referred to the FBIHQDivision for program review and 


approva!, if required by the FBiHQ Division. 



Program Division: 

FBIHQDivision: IT Operations 

Program Manager 
(or other appropriate 

executive as Division 

determines) 

Signature: 

Date signed: 

Name: 

Title: 

Signature: /s/ 

Date signed: 04/24/2008 

Name 

Title: IT Specialist 

Division Privacy Officer 

Signature: 

Date signed: 

Name: 

Title: 

Signature: /s/ 

Date signed: 5/6/2008 

Name 

Title: Division Privacy Officer 





Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEM Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 

N 


Date Signed: 

6/26/2008 


Name: 

David C Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 
Copies: 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC /Privacy Officer 
2*- FBI HQ Division POC/Privacy Officer 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/contractor information: 


The following types of information are collected in the 


b7E 


2. Purpose for collecting the information and how it will be used: 


b7E 


3. The system's structure (including components/subsystems): 


b7E 


4. Means of accessing the system and transmitting information to and from the system: 


b7E 


1 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 

5. Who within FBI will have access to the information in the system and controls for ensuring 
that only authorized persons can access the information: 


(OGC/PCLU (Rev. 07/06/07) 


FBI Headquarters and Field personnel with a need to see information related to 


\z 

investigations. All access to the 


is approved by 




b7E 


6. Who outside the FBI will have access to the information in the system and controls for ensuring 
that only authorized persons can access the information: 


that run on the 


FBINET closed network. FBI NET can only be accessed by authorized persons. 
7. Has this system been certified and accredited by the FBI Security Divisions? X Y es 


b7E 


No 


8 Is this system encompassed within an OMB-300? X Yes 

(if yes, please attach copy of latest one.) 


No 


Don't Know 


Was the system developed prior to April 17, 2003? 

X Y ES (If "yes," proceed to Question 1.) 

_NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 
_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

X NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 
and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, 

no PIA is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 

II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 

III. Full or Short-Forni PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 


(OGC/PCLU (Rev. 07/06/07) 


NAME OF SYSTEM: 


b7E 


NO (If "no," please continue to question 2.) 


2. Does the system involve routine information AN D have limited use/access? 


YES Ashort-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2, 2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DO) reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 


NO 


(If "no," a full PIA is required. 


PTA is complete.) 


4 


EPIC-222 




ALL IMfOHMATIOM CGETTAIITlIl 

HEREIN IS UNCLASSIFIED 

DATE 10-24-2014 BY NSICG/C32W33B9-1 

| JNbbR! CLASSSRCA1 ION/CON ? ROL MARKINGS,. 


APPROPRIATE 


(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM / PROJECT: 


b7E 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

L.. Sa $s Vs serf By: 

Name: SA| | 


NameP i 

Reason: 

Program Office: ASTOS/ASB/ASU 

Phone:] j 

U e c SjS-Sf? s ty Oft: 

Division: CIRG 


Room Number 7458 JEH 


Phone: 





Room Number 



FBI DIVISION INTERMEDIATE APPROVALS [complete as necessary consonant with Division policy] 



Program Manager (orotherapp 

Division determines) 

ropriate executive as 

Division Privacy Officer 

Program Division: [insert 

Signature: 


Signature: 

division name] 

Date signed: approved 7/21 /09 

b6 

Date signed: 7/29/09 


Name: SS/\ 

Name: SSA Kenneth R. Gross, Jr. 


b7C 


Title: 


Title: Chief Division Counsel 

FBIHQDivision: 

Signature: 


Signature: 

[insert division name] 

Date signed: 


Date signed: 


Name: 


Name: 


Title: 


Title: 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (jFH 7338)* 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the following page.) 

Upon final FBI approval FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd toJEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 


1 - DOJ Office of Privacy and Civil Liberties (via e-mail to 1 - OGC\PCLU intranet 

(if classified, via hand delivey to 1331 Penn. Ave. NW, Suite 940,20530) 1 - PCLU UC 

2 - FBI OCIO /OIPP (|EH 9376, attn ] 1 - PCLU Library 

1 - FBI SecD/AU (electronic copy: via e-mail to UC | D ^ 1 - PCLU Tickler 

1 - RMD/RMAU (attn | | 

2 - Program Division POC/Privacy Officer 
2 - FBIHQ Division POC/Privacy Officer 


[INSERT CLASSIFICATION/CONTROL MARKINGS, IF APPROPRIATE 


b6 

b7C 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBB PCLU/PCLO following PT'A submission. She 
PTA drafter should skip to the next page and continue.] 

_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 

XX PIA is not required for the following reason(s): 

XX System does not collect, maintain, or disseminate Pll. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No _Yes (see sample EC on PCLU intranet website). 

SORN/SORN revision(s) required? _No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes (indicate forms affected): 

RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. The system may contain Federal 
records whether or not it contains Privacy Act requests and, in any event, a records schedule approved by the National Archives and Records 
Administration is necessary. RMD can provide advice on this as well as on compliance with requirements for Electronic Recordkeeping Certification and 
any necessaiy updates. 

Other: 


[INSERT CIAS5IRCAT10N/C0NT&>1 MARKINGS, IF APPROPRIATE 
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INSERT CLASS! FI CAT IO N /CO N TUG l MARKINGS, IF APPROPRIATE! 


FBI PTA: [ 


b7E 


David C. Larson, Deputy General Counsel 

Signature: David C. Larson 

FBI Privacy and Civil Liberties Officer 

Date Signed: 07/28/09 


INFORMATION ABOUT THE SYSTEM / PROJECT 


1. Provide a general description of the system or project that includes: name of the system/project, including associated 
acronyms; structure of the system/project, purpose; nature of the information in the system and how it will be used; who will have 
access to the information in the system and the manner of transmission to al users. 


authenticated users can access the system^ 


The FBI will be responsible for ensuring that only 

Jin order to meet 


continuity of operations requirements. The security features of | [ will be approved by the Security Division before it becomes 
operational. 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is information 
linked to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 

XX_ NO. [Bf mo, STOP, The PTA is now complete arid after division approvals) should be submitted to FBi 

OGC/PCLU for final FBI approval. Unless you are otherwise advised, no Pi A is required.] 

_YES. [Ifyes, please continue.] 


3. Does the system/project pertain only to government employees, contractors, or consultants? 
_NO. _YES. 


4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by name 
or other personal identifier? 

_NO. _YES. 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 
_NO. _YES. If yes, check all that apply: 


_SSNs are necessaiy to establish/confirm the identity of subjects, victims, witnesses 


[INSERT ClASSIRCATiON/CONTlfel MARKINGS, IF APPROPRIATE’ 


EPIC-213 






or sources in this law enforcement or intelligence activity* 


SSNs are necessary to identify FBI personnel in this internal administrative system. 


_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are encrypted, hidden from all users via a a 

look-up table, or only available to certain users). Describe: 

_It is not feasible for the system/project to provide special protection to SSNs. Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the information? 

_NO. [If no, proceed to question 7.] 

_YES. 

a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

_YES. [Ifyes, proceed to question 7.] 

_NO. 
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FBI PTA: 


*I5ERT CLASSi FI CAT 1 O N/CO M IRQ t MARKINGS, if APPROPRIATE] 

b7E 


10. Status of System/ Project: 

_ This is a new system/ project in development [if you checked this block, STOP* The PTA as now complete 

and after division approvals) should be submitted to FBI OGC/PCLU for final FBI approval and determination if 
Pi A and/or other actions are required .] 

11. EXISTING SYSTEMS / PROJECTS 


1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

_ NO. [If no, proceed to next question (11.3).] 


YES. If yes, indicate which of the following changes were involved (mark all boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a format that is identifiable to 

particular individuals. 

A new use of an IT system/project, including application of a new technology, that changes how information in 
identifiable form is managed. (For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being merged, centralized, or matched with other 

databases. 

_ A new method of authenticating the use of and access to information in identifiable form by members of the 

public. 

_ A systematic incorporation of databases of information in identifiable form purchased or obtained from 

commercial or public sources. 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiable form. 

_ A change that results in a new use or disclosure of information in identifiable form. 

_ A change that results in new items of information in identifiable form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, the individuals on whom records are 

maintained, or the use or dissemination of information from the system/project. 

_ Other. [Provide brief explanation]: 


3. Does a PIA for this system/project already exist? 

a. Provide date/title of the PIA: 


NO._YES. If yes: 


[INSERT CLASS! FICATION/CONT^OL MARKINGS, IF APPROPRIATE’ 
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b. Has the system/project undergone an)/significant changes si nee the PI A? _NO. _YES. 

[The PTA is now complete and after division approval(s) shouBd bo submitted to FBI OGC/PCLU for final FBI approvaB and 
determination if PIA and/or other actions are required <] 


HNSERT CtASSIFICATION/CONT^hi. MARKINGS. IF APPROPRIATE] 
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ALL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS UNCLASSIFIED 

DATE 10-24-2014 BY NSICG/C32W33BS1 

FBI Privacy Threshold Analysis (PTA) Cover Sheet (oGc/pau(Rev.i/i7/o7) 


NAME OF SYSTEM 


b7E 


FBI SYSTEM CONTACT PERSON 

Name: _ 

Program Office: Network Engineering Unit, Network Section 

Division: Information Te chnology Operations Division 

Phone: 

Room Number: 1B964 

Date PTA submitted for approval: 3/31/08 


b6 

b7C 


FBI DIVISION APPROVALS A PI A (and/or PTA) should be prepared/approved by the cognisant program management in 

collaboration with iT, security, and end- user management and OGC/PCLLL (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also he coordinated with the RMD Forms Desk,) If the subject of a PTA/PIA is under the program cognizance 
of an FBIMC£Division, prior to forwarding to OGC the PTA/PIA must also be referred to the FBIHQ Division for program review and approval, if 
required by the FBIHQ Division. 



Program Division: NEU 

F B1H Q D i vi si o n: Netwo rk S ecti o rt 

Program Manager 
(or other appropriate 

executive as Division 

determines) 

Signature: /s/ 

Date signed: 4/16/08 

Name: 

Title: Unit Chief, Network Engineering 

b6 

b7C 

Signature:/s/ 

Date signed: 4/16/08 

Name: Julius J Brooks 

Title: Chief, Network Section 

Division Privacy Officer 

Signature: 

Date signed: 


Signature:/s/ 

Date signed: 4/21 /08 




Name: 


Name 



b6 


Title: 


Title: ITOD Division Privacy Officer 

b7C 


Upon Division approval,forward signed hard copy plus electronic copy to OGC/PQ.U (IPH Room 7338). 

FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 


Date Signed:5/15/08 


Name: David C. Larson 


Title: Chief Privacy and Civil Liberties Officer 


Upon final FBi approval, FBI OGC will distribute as follows: 

1 - Original signed copy to 190-HQ-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGC\PCLU intranet website 

1 - FBI OCIO 1 - PCLU Library 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: I 


b7E 


For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) is 
required by conducting and following Privacy Threshold Analysis (PTA). 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

b7E 


a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/cont racto r i nf o rm ati o n: 


b7E 


2. Purpose for collecting the information and how it will be used: 


b7E 


3. The system's structure (including components/subsystems): 


b7E 

_ There have been no significant changes to it since 2UU3. No FI A was done 

(because it was grandfathered under the E-Govemment Act). No significant changes are being proposed that 
would involve personally identifiable information. 

4. Means of accessing the system and transmitting information to and from the system: 


b7E 


5. Who within FBI will have access to the information in the system and controls for ensuring 
access the information: 


that only authorized persons can 


[ Only a limited number of system personnel (e.g., Network Management personnel, EOC operators, Security Division auditors, ISSOs, 
and ISSMs, etc.) have accessl ” 1 


b7E 


1 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: 


b7E 


security purposes. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons can 
access the information: 

No one outside the FBI unless authorized by both ITOD and the Security Division 

7. Has this system been certified and accredited by the FBI Security Divisions? _x_Yes _No 

8 Is this system encompassed within an OMB-300? x_ Yes _No _Don't Know 

(If yes, please attach copy of latest one.) 


I. Was the system developed prior to April 17, 2003? 

X YES (If “yes," proceed to Question 1.) 

_NO (If "no,” proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 
_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

x NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIAis required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIAis required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIAis required.. PTA is complete.) 

_ x No. (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA 
is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 


2 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: I 


b7E 


NO (If "no," go to section III to determine if a full or short-form PIAis required.) 


II. For systems developed after April 17,2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, and 

forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIAis required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBI NET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, 
no PIAis required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIAis required.) 


III. Full or Short-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," afull PIAis required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


YES Ashort-form PIAis required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, and 

8.9 of the PIA template.) Please note that FBI and DOJ reviewing 
officials reserve the right to require completion of a full PIA. 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: | | b7E 

(PTA is complete—forward with PIA.) 

_NO (If "no," a full PIA is required. PTA is complete.) 
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ALL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS UNCLASSIFIED 

DATE 10-24-2014 BY NSICG/C32W33BS1 

FBI Privac y Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev.07/06/07) 


NAME OF SYSTEM: Bank Robbery Statistical Application 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: 

Name: 

Program Ottice: 1TB 

Division: ITOD 

Phone: 

Room Number: 8979 

Date PTA submitted for approval: 2 / 29/2008 

Phone: 

Room Number:7338 


FBI DIVISION APPROVALS A PLA (and/or PTA) should be prepared/approved by the cognisant program management in 
collaboration with i'T, security, ant! end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forrns/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.) If the subject of a PTA/PiA is under the program cognizance 
of an FBiHQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the FBIHQ Division for program review and approval, if 
required by the FBI HQ Division. 



Program Division: CID 

FBIHQDivision: ITOD 

Program Manager 
(or other appropriate 

executive as Division 

determines) 

Signature: 

Date signed: 

Name: 

Title: 

Signature: /s/ 

Date signed: 04/29/2008 


Name: 


b6 

b7C 

Title: 

IT Specialist 

Division Privacy Officer 

Signature: 

Signature: /s/ 



Date signed: 

Date signed: 5/6/2008 



Name: 

Name|~~ 

1 

b6 


Title: 

i re b7C 

Title: Division Privacy Officer 


Upon Division approval,.forward signed hard copy plus electronic copy to OGC/PCLU (ILH Room 7338). 

FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 

N 



Date Signed: 

6/26/08 



Name: 


David C. Larson 


Title: 


Acting Deputy General Counsel 


Upon final FBi approval,. FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGC\PCLU intranet website 

2 - FBI OCIO /OIPP 1 - PCLU Library 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC/Privacy Officer 

2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


b6 

b7C 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Bank Robbeiy Statistical Application 


(OGC/PCLU (Rev. 07/06/07) 


For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) 
is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD)to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

The Bank Robbery Statistical Application (BRSA) is a mainframe application that serves as the repository for all 
statistical data reported on the FD-430 Form 


1. Type of information in the system: 

Bank Crime Statistics 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
employee/cont racto r i nf o rm ati o n: 

2. Purpose for collecting the information and how it will be used: 

Bank Crime Statistical reports 

3. The system's structure (including components/subsystems): 

Database Management System [ADABAS/Natural] 


4. Means of accessing the system and transmitting information to and from the system: 

FBI Investigative Mainframe 


5. Who within FBI will have access to the information in the system and controls for ensuring 
can access the information: 


that only authorized persons 


Only customers that have access to FBI NET may have access to BRSA. 


6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 


Only customers that have access to FBINET may have access to BRSA. 


7. Has this system been certified and accredited by the FBI Security Divisions? XY es 


No 


Know 


Is this system encompassed within an OMB-300? X_ Yes 


No 


(If yes, please attach copy of latest one:.SORRY, $ do not hove o copy of the latest one) 


Don't 


I. Was the system developed prior to April 17, 2003? 


1 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Bank Robbeiy Statistical Application 


(OGC/PCLU (Rev. 07/06/07) 


X YES (If "yes," proceed to Question 1.) 

_ NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17, 2003? 

YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

X NO (If "no,"the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBI NET website)?: 

_Yes. (If "yes," a full PIA is required.. PTAis complete.) 

_No. (If "no," the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


IL For systems developed after April 17,2003. 


1. What is the purpose of the system? 


(Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Bank Robbeiy Statistical Application 


(OGC/PCLU (Rev. 07/06/07) 


and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no,” the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no,” go to section III to determine if a full or short-form PIA is required.) 

III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTAis complete.) 

_NO (If "no,” please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES Ashort-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 

_NO (If "no,” afull PIA is required. PTAis complete.) 
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ALL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS UNCLASSIFIED 

DATE 10-24-2014 BY NSICG/C32W33BS1 

FBI Privac y Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev. 07 / 06 / 07 ) 


NAME OF SYSTEM: 


b7E 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: 

Name: 



Program Office: ITB 



Division: IT Operations 

PhoneJ 

-1 

Phone: 

Room Number:7338 

Room Number: 8979 



Date PTA submitted for approval: 04/24/2008 




FBI DIVISION APPROVALS A PIA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with iT, security, and end-user management and OGC/PCLU* (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Ace .should also he coordinated with the RMD Forms Desk.) If the subsea of a PTA/PIA is under the program cognizance 
of an FBI HQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the t'-BIHQ Division for program review and approval, if 
required by the FBI HQ Division. 



Program Division: 

FBI HQ Division: IT Operations 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 04/24/2008 

executive as Division 

Name: 

Name: 

determines) 

Title: 

Title: IT Specialist 

Division Privacy Officer 

Signature: 

Signature:/s/ 


Date signed: 

Date signed: 5/6/08 


Name: 

NameJ | 


Title: 

Title: Division Privacy Officer 





Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (jEH Room 7338}. 


b6 
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FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 

Date Signed: 6/26/08 

Name: David C. Larson 

Title: Acting Deputy General Counsel 




Upon final FBI approval, FBI OGC will distribute as follows: 

1 -Signed original to 190-HQ-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO /OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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2*- FBIHQ^Division POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) 
is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD)to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
em p I oyee/contractor information: 


b7E 


2. Purpose for collecting the information and how it will be used: 


b7E 


3. The system's structure (including components/subsystems): 


b7E 


4. Means of accessing the system and transmitting information to and from the system: 


Information is manually entered into the 


b7E 


5. Who within FBI will have access to the information in the system and controls for ensuring 
that only authorized persons can access the information: 


EPIC-259 
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NAME OF SYSTEM: I 


b7E 


(OGC/PCLU (Rev. 07/06/07) 


FBI Headquarters and Field personnel with a need to[ 



All access to the is approved by 





6. Who outside the FBI will have access to the information in the system and controls for ensuring 

that only authorized persons can access the information: 

that run on the FBI NET closed network. FBI NET can only be accessed by 

authorized persons. 

7. Has this system been certified and accredited by the FBI Security Divisions? _X_Yes 

8 Is this system encompassed within an OMB-300? X Y es _No 

(if yes, please attach copy of latest one.) 

Was the system developed prior to April 17, 2003? 

X YES (If "yes," proceed to Question 1.) 

_NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 


b7E 

No 

Don’t Know 


(Continue to Question 2.) 

X NO (If "no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIAis required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIAis required.) 

3. Is the system solely related to internal government operations? 
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YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, 

no PIA is required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

NO (If "no,” go to section III to determine if afull or short-form PIA is required.) 


II. For systems developed after April 17,2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If “yes” please proceed to Question 3.) 

_NO (If "no,” the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes, " afull PIA is required.. PTAis complete.) 

_No. (If "no,” the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise 

advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Forni PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," afull PIA is required. PTA is complete.) 
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_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES Ashort-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DO) reviewing officials reserve the right to 
require completion of afull PIA. (PTAis 
complete—forward with PIA.) 


NO 


(If "no," afull PIA is required. 


PTA is complete.) 
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ALL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS UNCLASSIFIED 

DATE 10-24-2014 BY NSICG/C32W33B91 

FBI Privac y Threshold Analysis (PTA) Cover Sheet (ogc/pclu(R ev. 07 / 06 / 07 ) 


NAME OF SYSTEM: 


b7E 


FRI SYSTFM CONTACT PFRSON 

FBI OGC/PCLU POC 

Name: 

Name: 

Program Office: ITB 

Division: ITOD 

Phone: 

Room Number: 8979 

Date PTA submitted for approval: 04/29/2008 

Phone 

Room Number:7338 


FBI DIVISION APPROVALS a PIA (and/or PTA) should be prepared/approved by the cognisant program management in 
collaboration with i'T, security, ant! end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forrns/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.) If the subject of a PTA/PiA is under the program cognizance 
of an FBiHQ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the FBIHQ Division for program review and approval, if 
required by the FBI HQ Division. 



Program Division: Dl 

FBIHQDivision:ITOD 

Program Manager 
(or other appropriate 

Signature: 

Date signed: 

Signature: /s/ 

Date signed: 04/29/2008 



executive as Division 

Name: 

Name: 




determines) 

Title: 

Title: 

IT Specialist 



Division Privacy Officer 

Signature: 

Date signed: 

Signature: /s/ 

Date signed: 5/6/2008 




Name: 

Name 




Title: 

Title: Division Privacy Officer 
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Upon Division approval,.forward signed hard copy plus electronic copy to OGC/PCLU (ILH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 

N 


Date Signed: 

6/26/2008 


Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBi approval,. FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGC\PCLU intranet website 

2 - FBI OCIO /OIPP 1 - PCLU Library 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC/Privacy Officer 

2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


EPIC-234 





FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: 


b7E 


(OGC/PCLU (Rev. 07/06/07) 


For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment (PIA) 
is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD)to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 


A. General System Description: Please briefly describe: 


b7E 


1. Type of information in the system: 


b7E 


a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 
em p I oyee/contractor information: 


Purpose for collecting the information and how it will be used: 



b7E 


3. The system's structure (including components/subsystems): 

b7E 


4. Means of accessing the system and transmitting information to and from the system: 

FBI Administrative Mainframe 


5. Who within FBI will have access to the information in the system and controls for ensuring 
can access the information: 

* " (units, bureau-wide. 


Members of the various! 


that only authorized persons 

b7E 


6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

No One. 


7. Has this system been certified and accredited by the FBI Security Divisions? X Yes 


No 


8 Is this system encompassed within an OMB-300? X Yes _No 

(ifyes, please attach copy of latest one: SORRY, S do oot have a copy of she latest ooe.) 


Don't Know 


1 
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I. Was the system developed prior to April 17, 2003? 

X YES (If "yes," proceed to Question 1.) 

_ NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17, 2003? 
YES If'yes,” please explain the nature of those changes: 


(Continue to Question 2.) 

X NO (If "no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIAis required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If 'yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIAis required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIAis required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIAis required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIAis required.) 

II. For systems developed after April 17,2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 
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_YES (If "yes," please proceed to Question 3.) 

_NO (If "no ," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIAis required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIAis required.. PTA is complete.) 

_No. (If "no," the PTAis complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIAis required. (FBI and DO) reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIAis required.) 


III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES Ashort-form PIAis required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2, 6.3, 

and 8.9 of the PIA template.) Please note that FBI 

and DO) reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 

_NO (If "no,"afull PIAis required. PTAis complete.) 
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ALL IMfOHMATIOM CGETTAIITlIl 

HEREIN IS UNCLASSIFIED 
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Unclassifed/FOUO 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 

(equivalent totheDOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM/PROJECT: I I b7E 


Derived From: 

SYSTEM/PROJECT POC 

FBI 

OGC/PCLU POC 

Classified By: 

Name: 



Namej 



Reason: 

Program Office: Aviation Surveillance Branch 

Phone 

1_1 

Declassify On: 

Division: CIRG 

Room Number 7458 


Phone 





Room Number: 




FBI DIVISION INTERMEDIATE APPROVALS 



Program Division: Critical Incident Response Group (CIRG) 

FBIHQDivision: CIRG 

Program Manager 

Signature: 

Signature: 

(orotherappropri ate executive 

Date signed: 

Date signed: 

as Division determines) 

Name: 

Name: J. Britt Johnson 


Title: Supervisory Special Agent, Aviation Support Unit 

Title: Section Chief, Surveillance and Aviation Section 

(SAS) 

Division Privacy Officer 

Signature: 

Signature: 


Date signed: 

Date signed: 


Name: Kenneth R. Gross, Jr. 

Name: 


Title: SSA/CDC 

Title: 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PcLU (JEH 7338). 


FINAL FBI APPROVAL/DETERMINATIONS/CONDITIONS: 


PIA required: _x_No _Yes: 

SORN/SORN revision required: _x_No 

_Yes: 

Applicable SORN(s): 

Notify FBI RMD/RIDS per MIOG 190.2.3: _x_No _Yes 


Consult with RMD to identify/resolve any Federal records/electron 

ic records issues: _x_No _Yes: 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? 

_x_No _Yes-forms affected: 


Other: 



David C. Larson, Deputy General Counsel 

Signature: /s 


FBI Privacy and Civil Liberties Officer 

Date Signed: 10/31/2009 



Unclassified/FOUO 
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FBI PRIVACYTHRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM / PROJECT: 


b7E 


Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DO) Office of Privacy and Civil Liberties (via e-mail to privacy@usdoi.gov) 

(if classified, via hand deliveiy to 1331 Penn.Ave. NW, Suite 940, 20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn: 

1 - FBISecD/AU (electronic copy: via e-mail to UC | 

1 - RMD/RMAU (attn j | 

2 - Program Division POC/Privacy Officer 
2 - FBIHQDivision POC /Privacy Officer 


1 -OGC\PCLU intranet 
1-PCLU UC 
1 -PCLU Library 

1 - PCLU Tickler 
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NAME OF SYSTEM / PROJECT: 1^”^” 


b7E 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Name of the system/project. Provide current name, an)/ previous or anticipated name changes, and an)/ associated acronyms: 


_| b7E 

2. Brief!)/ describe the system's/project's structure (including identification of any components/subsystems or parent system, if 
applicable): 


b7E 


3. What is the purpose for the system/project? 


b7E 


4. Please provide a general summary of the nature of information in the system/project and how it will be used: 


b7E 


5. Does the system/project collect, maintain, or disseminate any information about individuals in identifiable form, i.e., is information 
linked to or linkable to specific individuals (which is the definition of personally identifiable information (Pll))? 

X NO. Stop. The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU 

for final FBI approval. Unless you are otherwise advised, no PIA is required. 

_YES. If yes, please continue. 


6. Access 

a. Describe the means of accessing the system/project and transmitting information to and from the system/project: 

b. Describe who within the FBI will have access to the information in the system and the controls for ensuring that only 
authorized persons can access the information: 

c. Describe who outside the FBI will have access to the information in the system/project and the controls for ensuring that only 
authorized persons can access the information: 

7. Does the system/project pertain only to government employees, contractors, or consultants? 

U nclassified/fk) UO 
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_NO 

_YES. If yes, provide a brief explanation of the quantity and type of information: 

8. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved from the system/project by name 
or other personal identifier? 

_ NO _ YES 


9. Are Social Security Numbers collected, maintained or disseminated from the system/project? 
_ NO 


_ YES. Ifyes, for systems/projects otherthan those supporting law enforcement or intelligence activities: 

-What is the purpose for the collection, maintenance or dissemination ofSSNs? 

- Is it feasible to eliminate SS Ns from the system/project (please indicate why or why not)? 

- In light of Federal policy to reduce the use ofSSNs, is it feasible to minimize system/project-user access to 
SSNs in the system/project (why or why not)? 

10. Does the system/project collect any information directly from the person who is the subject of the information? 

_NO 

_YES. If yes, for systems/projects otherthan those relating to criminal investigations, CT, or Cl: 

- Indicate how such information is collected: 

- Identify by name and form number any forms used to request such information from the information 
subject (this includes paper or electronic forms): 

-Are information subjects from whom information is directly collected provided a written Privacy Act (e)(3) 
statement (either on the collection form or via a separate notice)? _Yes _No 

11. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_ NO. If no, please indicate reason; if C&A is pending, provide anticipated completion date: 

_ YES. If yes, please: 


U nclassified/f O UO 
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- Provide date of last C&A certification/re-certification: 

_ Don't Know 

12. Is this system/project the subject of an OMB-300 budget submission? 

_ NO _Don't know 

_ YES. If yes, if the name of the OMB 300 is not the same as the name of the system/project, please provide OMB 

name: 

13. Is this a national security system (as determined by the SecD)? 

_NO _YES _Don't know 

14. Status of System/ Project: 

_ This is a new system/ project in development. [Stop. The PTA is now complete and after division approval(s) 

should be submitted to FBI OGC/PCLU for final FBI approval and determination if PIA and/or other actions are 
required .] 

_ This is an existing system/project. [Continue to Section II.] 


IL EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

_ NO. If no, proceed to next question (11.3). 

_ YES. If yes, indicate which of the following changes were involved (mark all boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non-identifiable to a format that is identifiable to 

particular individuals. 


U nclassified/fc UO 
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_ A new use of an IT system/project, including application of a new technology, that changes how information in 

identifiable form is managed. (For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist) 

_ A change that results in information in identifiable form being merged, centralized, or matched with other 

databases. 

_ A new method of authenticating the use of and access to information in identifiable form by members of the 

public. 

_ A systematic incorporation of databases of information in identifiable form purchased or obtained from 

commercial or public sources. 

_ A new interagency use or shared agency function that results in new uses or exchanges of information in 

identifiable form. 

_ A change that results in a new use or disclosure of information in identifiable form. 

A change that results in new items of information in identifiable form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, the individuals on whom records are 

maintained, or the use or dissemination of information from the system/project. 

_ Other. [Please provide brief explanation]: 

3. Does a PIAfor this system/project already exist? 

_NO 

_YES. If yes, please provide date/title of the PIA: 


The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU forfinal FBI approval and 
determination if PIA and/or other actions are required . 


Unclassified/7oUO 
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ALI| IMUCffimTlOM CWTMITEB 

HEBEIM IS UNCLASSIFIED 

DATE 10-23-2014 BY NSICG/C32W33BSH 


tiNCLAS8IFIEIMFOE. OFFICIAL USE ONLY 


«X50i*cui oov. o \mm 

FBI PRIVACY THRESHOLD ANALYSIS <FTA) 

(equivalent to tbs? DOi 'Initial Privacy Assessment (1PA)) 


NAME OF SYSTEM / PROJECT: IMslOl CdlM# Svstem II 


itewiS r ma: 

Qaeslfhul lyj ENCLaSSIFIEII 
Jleetumff €!e« 


SYST FM/PMOICT POC 

N«n« l 1 

Program Office: 
Telecomm«m'cad«8.s Infttnepl. 
4% Collection Technology Unit 
(TICTC) 

Division: OTD 
Phoee£ 


FBI OCC/PCLE POC 
Nmm: ABC 
Vkomi 


Room Humber: 733i JEII 


b6 
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FBI MYISION MT1EMEMATE APPROVALS 



b6 

b7C 


After nil divbkus ogfrovnlsu forward »%mi Ford mpy plus ekuftronfc eojw to FBI OQC/FCLU (JEI 
733 % : 

(Tbe f BI.Privacy mut Civil Liberties OffiepEs Spmrmimi&nc eonditksmn endfor lloul amuwai will ho 
liuordoil on the IHIlowlug imge.) 


irN€LASSIIIEO#FOM OFFICIAL USE ONLY 
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UNCLASSIFIEB//FOR OfflCt XL USE ONLY 
O Ipf al Sptiih (PC'S) 3 Sill 


fim al mi ap p roval / betepmisatiqns / co nd itions; 

FiAresuimt: X No Ym: SOUN/SORN reUUm required: X So 

. i . AV"'W -- ' 


Applicable SOR.N(:s); 


m 


Notify FBI RMD/RIOS per MIOG !902,3: J&^No_Yes 


Preparc/revise/add Privacy Act (e)(3) dmemems for related tone 
effected: 


x m: 


Phs-tanm 


| The program should conselxwith RMD to jdeadfy/resoive soy Federal reeord&%kctromc records 
1 issues. 


Other: 

A FT A for DCS 3000' was approved m Jests 2000, at: which fete DCS 3100 was determined to- be a 
UpaedfhfbemU system,. DCS 3000 has mi tsedergsms mry sigelflcspf: changes aiyatmg the aespUiti 
retention or dissemination of personally identifiable infonaailon (PI!) shtee that time. Uo PIA Is 




I David C. I.&rs&sv Dep^tvOeaeral Cos$.G.sei i S^nMwe: . Vs .V" N " S> 

) FBI Privacy and Civil liberties Officer i| Date Signed; /t/7 

kwkw^vv wvv vuuvvvvvvvuvuvuuvuvvvvvuuvuvvuvv vv\vv\\vvv\vv\\v\\\\\v\\\\\x\\v\\vx\v\\\\\\v\\\\\xV\\wvvvv\v\\\\v\\\\vv\\\\\\x\\xwa\.^ 1 ■*— 
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INFORMATION ABOUT 


L Provide a pml description of the system ur project that ladmies; mm® of tikesptem/prajeet 
Including associated acronyms; structure of the system/projecty purpose; nature of the tnfbrntation 
in the system a»d how it will he used; who will have sieeess to the mformmiioo Is. the system sod the 
manner of tr a nsm iss ion to si users, (This: kind of Information may he available its the System Security 
Flan, If available, or 'from a Concept of Operations document, and can be cot and pasted, here.); 


ved.mnee t 








remnS® the Burnt! 




wirea ?bk! wsreiess iii 






X$t?0ft BMtCl 


yy-y. y &&, 


:pv \0 




canon see aee 


mlnate any Information about individuals In. 
title to specific individuals (which Is the deimitso 


tram, or 


FFA 


sslon approvals) shookt 
are otherwise advised* r 
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ukmwm&mQH officii 

IMpMl CMIeeium System fl; 


toes me system/prep ee 


:ontoeto: 


iff Sumners 


US. 


sons. Besertfee 


w system/ pro] ec 
om all users via 


^Ns{e.g., SbNs are eacryptea, 
.ble to mmm users), Describe 


meo 

























a. Does the system/pKtfeet support criminal, CT» or FCI Investigations or assessments? 
X YES* Ilf ves. proceed too uestion?.) 


NO.. 


b. Are subjects of information from whom the information, is directly collected provided & writter 
.Privacy Act (e)(3) statement (either on me collection form or via a separate notice)? 




NO, 


be p, \> ju. 


CLU to devefop/irnplomee t the 


necessary furmfo). j 


YES. Identify nay forms, paper or ek-ctreo ic, used to request seed 
information fri|m the. in formation subject: 

Prior notice ter til individual huge! Is not required as the #x : p&rt£ collection offer Register data 
by DCS 30CNJ las being pllpptfy anthoriied To the extent that the Pen Registers are used §o support of a 
criminal mvestipliou, notice to the target is normally provided, pursuant to IS lUX? 12S18(S)(d), 
wbMrr ninety days of the commencement of the aorvellknea. A judicial officer otsy postpone such notice 
Hi pood cause . 


In the case rtf Ren Registers authorised by the Foreign Intelligence Surveillance Act (FISA), SO 
O.S.C. §f ISO! at sec, , notice is unnecessary ss the ex parte collection of telephone data is authorised 
pursuant to 50 IES,€, f 1 M2, lb the event that. data, collected pursuant m FISA Is to he used as evidence 
or otherwise disclosed, notice must he given to the person whose telephone was the subject of the FISA 

> > t-SX S.-S.V J v .• 


lias the system, undergone Certification X Accreditation (C&A) by the FBI Security .Division (SccDf? 


NO, If no, indicate r*mm\ U 


:tg, provide anticipated cor 


A YES, If yes, provide dote of last C&A certileatfop/re-ecrtlficntlontI 


DCS 3CKK) was originally certified and accredited by the FBfs Security Division op June 12, 20(16, 
Updated ATO through May 1.5, 2010 Isas been, granted by foe FBfs Security Division, 

S, is this systum/poyeet the subject of an OMB-300 budget submission? 




.Don 5 ! know. 


.N.YES. If yes,; 

date nad game nr title of the 0MB 
sutmdsAon; 


mcLAsmwmm/jm^ official use os 
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ligfiii Collection: System (IlCv$| 3011 


The FBI's entire Digital Collection Sy stem, including DCS 3000 , is the street of an F Y 2010 
kMIht 300 slalod Ami! 25 * 2008 , 


9 * Is this a national security system (as determined by the Seel))? 

A NO, YES. Don't know. 


1 (h Status of System/ Protect: 


This is a new system/ project In development 
PTA is ow complete 
OCIC/FCLIJ lor .filial FBI approve!; 
required .| 


If $w cheeked this Meek, STOP. Tic 
rail's 1 should he snhmimed to FBI 

PI A and/or ether actions arc 


II. EXISTING SYSTEMS / PROJECTS 
i. When was th e system/jwol ect developed? DCSO 000 has been opemtkmal and deployed at multiple 


FBI field oflces | | A PTA in’ DCS. 31100 was .previously completed in. Jane 2 CMM.. At that time 


It was determined that DCS 3000 was a "gmad&thered" system so that no FI A was necessary. 

2 , Has the system/project undergone any significant changes since April 12 , 2003 ? 

__NO, [If no, proceed to newt tfuesikm (11,3), j 

. X . YES. it yes, indicate which of the following changes were involved (me 

tmacs that apply): 

_ A conversion, front paper-based records to art electronic system. 


A change Bom Inlormation in. a format that is anonymous or nonddanildahk to a 
format that is identifiable to particular Indi viduals. 


A new use of an IT sysfem/project including application of a new ledtnology, that 
changes how information in Identifiable form is managed. (For example, a change 
that would create a more open environment and/or avenue for exposure of data that 
previously did not eaist,) 

A change that results in information in identifiable form being merged, centralized, 
or matched with other databases, 

A new method of .authenticating the use of and access to information in. Identifiable 
fom : by members of the public. 


SS!fIHBIFOR OFFICIAL USE OI 
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1>I§ to! Chiteethm System fliCS)31 


A systematic meorporauon of databases bll||ii»alp| irrtdeodfisMe form 
purchased or obtained from commercial or public sources. 


A new folemgenev use or aimed agency function drat: results m mm mm m 
eachanaes of mfonnatina m MartMabk form. 


A change that results m a new use or disclosure of Information m idemlfefole form. 

A change that tm&m fo. new itw ofonfmmatlon in identifiable form befog added 
info foe svstemfocPieot, 




Granges do not involve a change In the type of records maintained,. the individuals 
on whom records arc maintained, or foe use or dlssemmatfon of Mdmtatlon form 
tie svnteuboroiect 




1'he only changes to DCS 3000 since It .first become operational Involve tedvwe replacement end 
ty software upgrades that do not affect foe collection;, maintenance or dissemination ofFIL 


3, Does & FI A for this sptem/pfolect already efost? 


fate/itli: of the FlAr 


m 


Yl£Sv If ves: 


H ?'! S* i 'V*\> •’ x > <y«y* tAvX v ->.-:>N <■ ^x-x^n >•*;•:<*> c>v>y<N.'N > v i%A ^ i V 

v v ‘. .K i.vW t-.VI'.V' oy .•.•vV>.\'.v! viv <• J.XyW .Vl\v .V V O.i ,v, \ l.t A .A-.iW J.v tv.i J.^Ay.h •■$}.> A-V i.viiy J\. ;J C \ . i^vdi .!: .ti-Xyv 


dx F "• 


no PIA was 
slapliMOf e 


'A lor DCS 3000 was completed in June 2000, at wfeicb tone a detenninatlon made that 
repaired as tie system was graratfefoered under foe BAioverntnent Act. Here lave been no 
cant chanaes to DCS 3CKI0 aEhetfog PII since that FT A, 


official use ciislf 































ALL IMFOKH&TIQN CONTAINED 
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{(XICPCLy s;R«v, 0 ]? 0 S/ 0 I) 

FBI FB.IYACY TIIBFSIIO LI) ANALYSIS (PTA) 

(Mtuvatea* t® Ae DOI laitM Privacy A&se^mcmAlPAB 


FAME OP SYSTEM / PROJECT ; «|» Co! 
OasDfLB By:: LMCLAIS1FIIB 


[ SYSTEM YNOIECT POC | PM OOC/P CLD FO€ 

! Name; ET_ | Name: ACM]* I I 


BeetsvBf? Oii: 


{•Yograii; Office: TICTU 
Diviffioa; OTO 


I Ph»Ds;| 

£ w. -V •%• :t > w V ' 

v&omshum^: Ate A 


b6 

b7C 


FBI DIVISION INTERMEDIATE APPROVALSffixomOco 
| Program Marrapt (or oAet 
| ppropdsfC 


PtsOONj 


Division Prim Offieer 


n&tcrmiacsy-- 


l FBI11Q DBbba: j SigeeteO: 


] SlgMtere; 


1 Operational 1 Date Armed: 



,,.<i , V -A ?' 

.J 

epF-^A.v-- 

i; 


1 ^ > 


iBOmoiogy 

Division 


iNApLlB l | l||||lllllll|:NsniVL 

Title: Fwsram Mseaspr, TICTU' I Title: 


y on Cmey i to * L 


b6 

b7C 


After al ffiOsAm egnremffi imw%M togseti Faro torst eteasroere aegy to r B t m>t li: t•t.Ltl 


(TBe FBI IVIvacy »<f Civil Liberties Officers BeteaaieetDrA ereOtbag arotbr flab apprAvit; will be 
recoAled o« the tblknvi.ee mote j 
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FBI F'Fa %■ Ilfpfol Colfoofoo (PCS) 58®i 


FINAL FBI APPROVAL / PlTlEMimiK^S / CON Dll IONS: 

HA stowed; _X No Ysa: SORN/SORK rwfok** retired: 


No 


Ye 


x.m.. 


! Applkebfo SOA'Nfo): 


mm FBI mmrns m? miqq i i. no y« 


F*sq«re/mvi»^dd Ifovsey Aot <W>?3> stot^mmrs for tUUsd X Mo . Ym^tm 

OfoCtiSd; 


Tbe pmmm t$*mM dlkilii -mih RMf> to sm Fedorslreeofosfofortfoak roeords 


■sap-sas.- 




Da|p C, 1,M, D4p%’ G^mi Co» v d 
FBI Prfv&ov &g&l Civil LIMRte CJIfksr 


Sipate: 

Ete Signs*!; * 
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TA: IMglfal: CBdkefion %Item fBO) 5i#f> 


:nfobmatiom aboi. 


mm SYSTEM / PROJECT 


L Provide a. getsoml deacrlpiioB of ike system-or project th&fi&eJaffes: name of five sysiem/projeet 
lododiog asaodotvd acronyms; strsietare of the system/pr^Jeets purpose; nature oi ike Mfosmailoo 
m fie system mm! low if will be used; who will love access to fie information to the system nod tie 
manner of transmission to ml users* (This kind ofldbrmatk® may be available In the System Security 
Flam if mwiMska or from a Concept of Operations document, and can be cut and pasted hem.): 


mmmn ooneeteu m 


aatnonaea oy a Indicia 




vV : ; < 


t&ft-r'Bi ta m0«i\ exploit ami mtellige^e coltected by ELSU’fl 

nvironment among linguists, case agents, and cose managers. DCS 50(11 provides 
at FBI Field Offices and at FBI MO? 



'< . >S 


In support of 

of 

tniomatloo. porsu< 


a. voice data 

















imt 


i|>; 



& iin 
















FBI FT A i Digital Coieeilea System (PCS) SIMM) 

Are Social SSfodtv Numbers (SSffol miketedt atahttafoed or bwsemioaieb imm the 


„JL.„ NO. 


YES... If'm stekal 


. SSNs are mommy- io asraEMsMoaalkM the kteiiy of auhteotc vktms*. mtmmis 

or sources m fots law eofotoemeo? or IdOilgestce activity 

__SSHs are accessary to ideotily FBI persatmel in this mtmml admeiklraliva system, 

SSNs an ituoottaut for other reaseos, Beserlhe: 


_The sy-s;emlpreject provides special protecfoxo to SSNs (e\g., SSfli are aacTyptefo 

tadforn Pom all. users via a look-op table: or ooly available to catefo users). Beserlhe? 


It Is oo? feasible for the sysfemfotefee? to provide special pphecfkm to SfsMs, lAfhahti 


Does the systgao/ptspee? collect my Mmmmim directly Foot foe person who Is the subject of the 

OtOMthO.O? 


NO. 
X YES, 


v$C XV^VV^-^-.'^ foA tT S > c A>fo\ v 

% .v.\ :v>x£v : |>? xN> F:->:|: 


a. Poes the syststfoptptect support criminal, CT| or FCI fovcstigadoos or assessments? 


X YM 


•A'.W>' VV \U’. 


NO, 


|if yes, proceed to tpestloo. ?ij 


b. Are subjects of loformalkw Foot whoso the folhrmwfoo Is directly collected provided a written 
.Privacy Act (e)(3) smtemetd (either otrfoe collection form or via a separate entice)? 


necessary fbr»(i >4 


will good to work with PCI 


| YES, Meotlfy any to rots, paper or eksArouie, used to respesf each 
information from the kforrmotieu se block: 


CNCLASSft ? I.IIF/Ft>S OFFICIAL CNF ONLY 


EPIC-124 





























s--\ 


vV. 




preejORppPeSpele# C«i«Sp«R« P 


fives,. provide dote of tet C&4 eo.itIi1ei:tIoa/nMwtlio: 


. X YES, If j : e% plosee provide fie dole 

eoi mm® or title ef tie OMR §e#&®§t»ees 


$W 




\V> 


pproeep 




II. ElISIfNO SYSTEMS / PROJECTS 
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LXCLASSlf lEPf/FIM OFFICIAL USE ONLY 
FBI FI'A: IMglf.il Cloieeinn %stma* (PCS) Still 
.MO, flfno* proceed to qw^km. (U)<1 


X YES, If yes,, Indicate which of the tMtowIna: checker were involved (mirk all doves that 




apply): 


EtS; xxSj'W.i •V^.N&S^A-V-AV^YHvSvi-:*: x%.* :«•.<>; V x\ y \v\x¥A>A£V i-Ax 


A i>:-^>N-5S-iN:WC ; :-^WYiN4 xiNAVoHHX'YFt'V^x <>>'«: si- 'jV : vY'^' >; : 'h i' tH’hC ¥ « >.¥ rs/\y\x•'in-N<\t <'Y V C ; <‘\Yv^.*- cAOHYY¥ &V 

.'Ys, ■ o.,J. \>S.¥& :¥&¥,¥C^:L¥\&&CvV v ¥i ¥*•$ Vv ¥Cvt iYxYJF^ XivxvYv i \¥ \¥ls ¥\.-v-S x ¥-S i C* YL> LY s .*.¥.!! :Y xY>V'Ys¥¥v >“V'SV vV' 

YiY *¥;¥ x<¥ s4<X-m'^\sfck|<S $\'\- ¥W^ : ?'%;44 * *¥¥’W 

.¥CY:¥i¥SxA ¥AxW\ ¥:<> A\¥V>>.¥v>A¥:i¥vx¥V ¥-V* >.*A^.¥s¥V\¥.Y>:¥ :Yvx \*.< X i\¥\¥vY.Y> 



pmvtotwtv con not exwi I 


A elnatee that results m inlnromh.oe. id Oenolutole .form beotg. teethed, esapadeoa, or 
matched with other databases. 


A new method of aafhcttfEidttp the use of and access to iuilhnOinn in identf table 
form bv members of the poMkC 


A sptematie meorpotatiop of dauOases of Information In Ideoiiftahle form tmsebased 
or obtained hoot eoiowerelst or public sources,. 


A neo •meragenev use or shared apenev function tbit results In new uses or exchanges 
of Infettoafibb in IdeoiioMo fornf 

A change that results In a new nee or dlseloinre of InfeoMtloo. In Identifiable form. 


A <$mm the! results to now Items of tnlnnmtloo In Idootliafele lotto being added loot 
the systetnYtoiecL 


X Chanaex do not. involve a ehsaoe In the type of records mainlined, the ththildihli on 

%V> S * sV S%\N%N\ . . . \-.* . . . v .»• \V •%■ *?«•. V .V V. A’*’* .V .V .'. ■•■•■ . V . . .•,%. A 

Whom reeoras are or the two or timmmrnm of totormahon tom the 

weieehmofeeL. 


PCS S#CMf has nodergarte mMm hardware npdaten and so#ware secorfi? opiates that do not 
impact the collection.: malatetatoee ot dissemination of FII. 


Other, f Provide brief explanation|? 


3. Does a PIA for this s?sfemlthi|dP aireedv exist". 5 




HO. 


YES, If vest 


PHClIApIf lEPlFOlf OFFICIAL LEE 0HLY 

OS*. 
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SYSXEM/FMMECT PCX 


El OG€E>€Lll PC 





























IIBCLA^F IIMFO'OO WHEN REMOVED FROM ATTACHED FT A 

FINAL FBI AFFROVAL / RFTMMIN: AMGNS / CWWEMlt 


HA k 


Doresosyti 

bv H-Cb: 

y v . 
>»:*: 

V:' 

to 

be eompte 

IPO <i.N <T 

A fee 

Pn 

sbiBlted ms 

Y'TV Y r - s 


PiA h mi respited for the fbUowDg mob(s): 

System does. eel collect sisymiabt or disseasmaie Fit 

■■■...I SypNn is gosBRtfeeteif {»>. «stese befere 4/1 later pth'scf EAsl. 

.iMmsa&M in tie syetetss relates i® internal goveratsteta: eperpkssy 

.System has bees previously assessed sudor an evaluation similar to a PIA. 

X No Nonlfscaat IaI \a' vVv'a' V \5.V v*'X a\ vvV a* . >.<vSv.i-Vs) Vi\j W ili >VI»1 n*V>.h 1 * 


£SrJs .-xv :•• 1 

' X* XV. J .■ | 



-1 


WMfe _ 

|fc&& i 

s encrypted sod asmaet be 




A opt feaHo SDRN (s): 


N/A 


Notify PBIRMO/RJOS per MIOCI %9&2M: No Yes—SeeMtspie BC ea FCLU lae^pt website here: 

bop'/Aoete/DOAisOC/Ll’B/FCLO/iriyacyCivd%20Ll bertte^A20Lib?sNd|b:my lbs piog! Sb”2 ~3 jtp vAbd 


SORR/SORN revNIoafs} :mpiredP D o 
FfepstbAeDseNdd Privacy Act (n)£f) Dr telated ibtmO 


No Yep 


b7E 


RECORDS., Tie program stesltl cossets with EMD to IdesPfyAesolvo bay Feb««iAeords/eiecti-o : aD reeords m»*$« 
'He system slay eoutasts FedeMreoArds whether or mt si cootsiss Privacy AD requests aed, in,any event, a ssscordl 


j' ’>Y Kv>\”' 


Bbeabetls Rose WiihrselL Aetfeg Demrty Cleaersd 
Counsel A FBI privacy sod Civil liberties Officer 


s Soroature: s *4*# ,<r . r .0«, r „ s ,e \.r r 
$ p^te Si^^ 4 : \^* T ':U *'** ' v ' v ' yVk ' sSw/£$' 














































L IMFOlilMTICM ABOUT Till SYSTEM: I FE0J1CT ; 


b7E 


1, Ihtwocle t general #eseri|>tto.ft of the sfsiern &t proieel mnt Modem to) mm$ m 
ik& i I»dtadl»g asenetateil aeranpaa; (S> stemime of the 

wlli otter peo|eeO or of sterner (e) 

ptrpooe of tie sf$toolpro|rrt; ftl) natwre of the iaforamiloB in tfer M$foot/pro|rrt 
ami low It will Sr smut; (e) who will Save aeeesa to the information in the 
«|strtm/pro|ertt fl> oaS the moroer of tra»stBlpl« to oil nstn. 


(11) The FBI A Pats totemepi 1'erhrologf Unit £0111 I) -deretops an# clip loro sr itoms amt 
equipment tor lowfutiv aiuhonox! electronic sureeilonce oi data network 
eomomnleatieee teqhnologfes in support of the FBI’s Coomerterrorism., 



bl 

b3 

b7E 


bl 

b3 

b7E 


bl 

b3 

b7E 
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!J^CL»IIFIE»#FOIIC> WHIN REMOTE! 


ATTACH! 


2. Does the system/project colleen maintain, or disseminate any information: about 
individuals (he,, a horn an being or natural person)? 


X MO | If no, STCIF, Tie FTM la now complete and utter di vision approvt 
slwold b« so Emitted to FBI CIOCEFCILU for final FBI appremh Unless yen are 
ofkerwise advised, no FIA it mpnrecL] 



FES pf yea, please continue,! 


3, Eiease indicate If any of the following eheraoteri foies apply- to the Information In the 
system about indi viduals: Bear in ndnd mat log-on information may identify or be 
linkable to an individual, 

(Check all that apply,) 


The information dirsetlv identifies specific individuals. 

The mfomtsilon is Intended to be used, k edmuacllon with other data elements, 
to indirectly identify specific individuals. 

The in&mtatlon can be used to distinguish or trace : aa;lndividdal ,: s identity (Le , 
is linked or linkable to specific individuals! 


If yon marked any of the above, proceed to <|oesflon 3, 

Done of the above. If none of the above, describe why 
identify specific. individuals either directly or 'indirectly. 


the Information odes not 


4, Does the systemtprqieet pertain only to go vernment employees, contractors, or 
consultants? 


S. Is information about United States eitiaens or lawfully admitted permanent reside 
aliens: retrieved from the svfoenvforolec? try name or other nersonal. Identifier? 


NO, fIf no, skip to ipesfino f.J 




Mi. LAvlidt ’t- ( f 1:| > 
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[EB. pf yes, proceed to the m 

6. Does the systenYprc#el'.collect any information directly from the person who is the 
subject of the in formation? 

__MO fif ne> proceed to question 71] 

fWl YES 

a. Does the system/project support criminal. CT* or PCI investigations or 
assessments? 

.Nil:: 

YES flf ves, proceed to question f|| 

b. Are subjects of information from whom, the information is- directly collected 
provided a written Privacy Act (e)(3) statement (enter on the collection form or via. a 
separate notice)? 

MO [The program will need to work with PCLU to develop,(implement 
the necessary form(s).] 

YES Identity any forms, paper or electronic, used to request such 
information from the information .subject: 

Are Social Security Numbers i SSNs.? collected, maintained or disseminated front the 
systemipmject? Full SSNs should only be used as identifiers in limited instances, 

NO YBS If yes, cheek nil that apply: 

_SSNs are necessary to estabiish/conilrm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence aovivity. 

_____ SSNs are necessary to identify FBI personnel in this internal administrative 
system, 

I __SSNs are Important for other reasons. Describe?: 

.The system/prqiect provides special protection to SS'Ns (e,g„, SSNs are 

encrypted, bidden from all users via a looku.:p fable, or only available to certain 


















I_it is not feasible for the system/p rchect to provide special protection to 

SSNs, Explain; 

i Is the system, operated by a cpntraelpf ? 

No. 

: r_Yes. lo&rnmtion systenrs operated by commetors for the FBI may bo 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
i contains standard contract clauses that must be .included in the event the system, 
collects, maintains or disseminates Pd and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may fee required if a contractor is operating, the 
system for the FBI, 

Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SeeD}? 

_ NO If no, indicate reason; if C&A is pending, provide anfieipsted 

completion date; 

1 YES If yes, please Indicate the Mhnving, if hnownr 

Provide date of last C«§kA certificafion/re-eertifiention; 

Confidentiality:_Loo_Moderate_High_Undefined 

Integrity: ..Low Moderate_High_Undefined 

Availability: Low_Moderate_High_Undefined 

, Hot applicable.this system is only paper-based, 

Is this system/project, the subject of an OMB-500 budget submission? 
i NO 

_Y ES I f yes, please provide the date and Panic or 

title of the 0MB snhmissleht 

Does the system conduct date mining as defined in Section 804 of the 
Implementing Recop-jmendatlons of the 9/11 Commission Act of 2007. FI,, 110- 
53 ? 

NO 



SfeCl i O M.N 

UNOCMlSf FI£f>//F Of O WHirN REMOVED FROM ATTACH: 
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EB/TOOO WHKN REMOVED FROM ATTAr* 

Is this a natfoaal security system (as determined fey the SeeD}? 


I. State of Sysiern/ Proj ect: 


This is a new system/ oroiect in devdopmetr 


1 SYSTEMS/PROJECTS 


L When was the system/protect developed? 


Has the system/proiect undergone my significant changes since April 1.7, 2003' 


NO pf no, proceed to nest question (IL3), j 


YES If V v is * HJ CilC sii l C \\ ■feieh of the tbl lowing changes were involved (mark ail 
boxes that apply?: 


A conversion from paper-based records to art electronic system. 


__ A change from Inforrnad.on.in & format that. Is anonymous or non- 

identlftehie to a format that is Identifiafele to particular individuate, 

_ A new 'use of an. 11 sy stern/projeef, including application of a new 

iecfe.nology, that changes hose information in identifiable iferntls managed. 
(For example, a change that would create a more open envirotrmenr and/or 
avenue for exposure of data that previously did not exist.) 


A change that results in information in identical: 
merged, centraliaed, of matched with other databases. 


m totin heuu 


.4 new method, of authenticating the use of and access to 
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_ A new interagency use. or shared agency function that results in 

new uses or exchanges of information, in identifiable form. 
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TA Is timfed fa the MfM; opoioliag cafelnllty wills so 
Blobs-' !, ilMdl Future ascteraeais of tbs payee! will address 
fifes provided by the ttfeor agpfeatioB aod tits aggmjfebm 
■oat miter Fill low fefeeaaosm. aad feaibgaoee systems and 


DIVS 


>^V//. 


t*X\ &&5 


felfefepd fed 
sfegfMd|m|m-, iTM> ; 
fe coding legal controls and ttfegmfeg Ife ipfey elite 
<m major applicatlfe for vwsvmg and |Bideifelfe S'I'AO 
"M sources., as identified by NSB*. to fevdoga logical ffett 
■4 search and analysis capability. Tfe felofefebifafefefe 
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MO iflpsy, MfClfX The FT A fh new 1I§IPIII Ipti after 4h feks ^p|IFi®OI 
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|||||}||tift to government or 

iiipi»oT " : i iiii ir mriL 
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4. Is mkmtktps wmt untftl States dfhwnsw kwtetf nktnUwi pvnmmtM wwnlem 
sMIms relieved ikwn Ifw by name dr k§# iiMMl kdmi&w'? 


5- Km Scwk! Sec unty Mtmibers; iSSRs) c^idOM, mamkinesf or &oro the 

aostem/psnieet? Pllliyilh 

NO .X.YES. If yes, «ln?ek |fl tint apply: WMSS!^^ 


X SSNs net to estnEIkh/eonEnn ke .kkokv of sadwte... vieiiky 

witnesses or sources k to> oov eotoreament or snWbioeovU aefsOfy. 
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SSNs mt ||: kidEly 1'B 1 pemk|l!|iHi^liiiliI Mink mx ativas 
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encrypt Mite atwkkfi ^i||r oily : #vpkbk to cor Ok I 

risers}. Describe; |f|. 
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the necessary f#rsn(&),J 
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Itewstsatiest from the information subject: 

::: P.lies the system smtegosse CetekMiou & Accreditahoti (C&A) by the FBI Secbritf.i 
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X .NO ft mdkato swwn: If C4kA k pending* provide tmifa ipafad 
oom|tktkm 4#%h Ttse Spate! Ittesxsissgte and ApplkMims WWwc (STAG) 
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22,, 20(t9, tssd te;;Xl ! 0 ospitkllh-k'iilXltpIl 2012. This prelect will require 
eemiksite ami sseetettete atpt| ; §l|||plkado!P f(|i||g|io?t and accreditation, 
acts rtdes for itsls te|or appllteiesxte prt|iep| to fee oopiplcted. by September 20,2010. 
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UKS ? ■* i A: 




FiA h teouubd fey the Act 


FI A. is to bo eomtdeied as a sootier ofFBl/DDi dissereYtei., 


Is FIA to bo poMbhed on FBPCiOV iuflet any PM0 F01A skdaeiious}? Y«& 


FIA is t>sa respked: lor ikefellmvlstg. masons); 

by.steso does not collect, sosuatohr. or dbseedrsais Pit. 

.Svsteat is gfoodsadtosed ( so exfeieuce before 4/17/2003; os later 

J. Irsibrtoaikor to the system relates to hOeroai government opemlic 
Sysroat lots desk previously assessed uader an evaluation similar 
Ids slanifkeot privecv issues (or privscv issues ore uoofsantcd). 


houges posing signl&aUt privacy risks 


r to a FIA. 


Agplfcabie SOEMs): Acborsattag :%feesib far fee ©OF JUSTIOEAJ@ : l } . 6® Fed. Ren.. 3!4bb ptine 3,, 2CN34),. #s 
supplemented, ?l Fed, Reg, 146 (Mr.3, 2R8l>). 

fefoiilv FBI MMD/RIDS per MIDG 190.2.3? X Mss Yes—See samole EC on POLO lutraswt Website here: 

bttp: Aborue/D0 A3GOI..1.B AC L Ei/FriyeoyGi vilF*20l.iberdesiyA0i,iFo5ry/i3ku_doyssiog If A2-Y _ ee,wpd 

vORY/SOKY revibooCsi reoulred? X Ho Yes Oabicate revisionsneeded}; 




R1COBBS, lie progretn. shoofel eoosolt wife RMD to idendly/resoive any Fedent! reeasds/elecirouio reeords issues, i 
The system stay eoalala Federal reeords whether or tub if cordate Privacy Act regtmsle and, in any event, a records || 
schedule approved by the Yatknrai Archives tad Records AbabaislMioa is necessary. P.M0 etm provide advice on fell f 
os well as on oomglktace with rsptirerneofe for Bterroaic Reoerdbee|nsg Gerblkttion sad any necessary updates. | 

Other: | 
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Provide a general description of the system dr project that! Indndes: (a) 
name of the sysiem/project, Including asseeisied aeimsiymS? {fe) stnretore of 
the systes?/pro|ect, Ifidadmg mter€o»»«etio»s with oJher projects or systems: 
te) purpose of i he «y siein/proleeit {4} nature of the information to the 
sysfeiTi/proJeet and how If will be used; (e) who will have access to the 
information m tbe sjstese/pewjeefja't) tpid the manner of ironshrisslon to all 
users. 


e~hased application^ 
:® ■-replace the eitsfra; 


The primary tool used within the FBI to measure the availability aad. a 
of requisition-related funds is the spmdpim, in practical terms, a spend plan 
envisioned as a e&ee&isg account, upon which individual rcqnishions: (or *k:he 
drawn. In order for a requisition to pass through ITB's Fina.oc.iui Mansgetuer 
(FMtJ the equivalent of the ''bank'*), sufficient lending must be available to 


Spend plans are generated, at a unit level as -spend ptm requests identifying 
specific financial needs, such as the purehaseof 11 hardware, software or use license. 
Spend plan requests Include a description of the item to he purchased, the hinds require 
to purchase the item and certain financial and programmatic data. The unit submitting; 
spend plan request enters this information into the Financial Management System. (FMS 
a major FBI FISMA applica tion supporting the management of FBI business arid 
personnel famhelal records, I I 
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2, Does the systerrdprpleoi called, s$sim s or dispppk# any 
individuals (le,., a human. feeing or natural person* mgatdless of nationality)? 


b7E 


NO film, W. The FTA k 

should I sc submitted to FBI OCiC/PCLU for fund FBI apprnvai Unless you are 
otbetnvNe -m FtA 

X YES 

3. Pkw indicate If tow of tie following characteristics apply to the inifetniatioa in the 
system about Indwiduaiss Boor in nM that tog~en io&ssmdiom^ay Identify or bo 
IkfcaMe to »tndmdoal 
fUheektdl that apply.) 


X 


The information. directly' kiootiBos ipeollio ipdtoldtads. 

The BilbrmaBpo k Intended to fee: used, lo eopimetioo with other data elements, 
to indirectly identify fepgdife individuals. 

The tmlfemmioo can. he used to distinguish or trace an. IndMduaFs identity (l.o,. It 
Is linked, m linkable to. specific individuals}:. 


if you Markett any of the above, pm®4 io Question 4, 

None of the sfeovw if none of the above, describe why the informat ion does not 
identify specific individuals either directly or indirectly, 

4, Dees the system/prrdeet pertain only to governmeat employees, eomraetors, or 
consultants? 


NO 
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5. Is information about limited Stales citizens m lawfully admitted permanent resident 
aliens retrieved from the sptemlprojeet by frame or other personal identifier? 

HO fit' no, skip to yprestkm 7,j 

|_ YES (If yes, p 


6, Does the svstem/projeet collect any information directly from the person who is the 
subject of the inibrniation? 

X NO | If no, proceed i& qmMm f|] 

YFS 


a. Does the systemtpro|ect support criminal, CT, or FCI investigations or 
assessments? 


HO 


YES flf ye®? proceed to tfuesthm ?,} 


b. Arc Mbieots of iofrtrntMon from whom the ibiermailon is directly collected 
provided a written Privacy Net (e)(3) statement (either on the collection form or via a 
separate notice)? 


Hi 


the necessary ffrifrtsfsje) 


YES identify any farms, paper or electronic, used to. 
information from the information subject; 


7. Are Social Security Numbers (SSNs) collected, .maintained or disseminated, front the 
system/profeei? Full SSNs should only be used as identifiers in limited instances. 


X HO 


YES Ifves. 


that apply; 


SSNs are necessary to estahlish/confirm the identity of subjects, victims. 


witnesses or sources in inis law enforcement or inteUmence act.i vsty. 


SSNs are necessary to identify FBI peraormei in this internal administrative 
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OFFICIAL USE 




SSNs are important for other De«crfber 


. ffe provides special pnoecbon to SIMs (e.g., SSNs are 

PScrfppd, MiiM from til users via a look-up table, or on ip asailafele to eerlain 
users!, IkseHhac 


It Is aot fousible fer tbe spstouPpjpjout to pruvMe special proteetkm to 
SSNs, Ei 


Is tho system operated by a eotdmelnf? 
1 No... 


__ Yes. In&KOuatticai systems operated by contractors Ibr the FBI may he 

eonsldered IMvaey.Act systerns of records, The Federal : A.er|i;dsit.ion kegtdatkm 
contains standard contract' clauses that .must be iueloded in too event the system 
colhmls, nuapialns or dlsseininates PIT and additional requirements may be 
Imposed as a matter of BepaAtoeot of iustiee policy, Consultations with the 
Ofsoe of the Qoeeml Counsel may be required if a contractor is operating the 
system fer tire FBI. 


Has tire system undergone Certification & Accreditation (C&A) by the FBI 


Security Division. (SeoB)? 


Jodlf not be separately accredited, It resides, as an application, on the 


adobttlstradoo: maioltsmo aod is enoantpsssM to. ike CM A for fire FBFs 
Administrative Matofraote Appiioatioos (AlvlA). The Allowing idfoimafion 
pertains os AM A. 


_NO If no, indicate tsw; if C&A is pending, provide anticipated 

eompletio.n date: 

X YES If yes f please indicate the Mfuwing, If known; 

AM A was remecredited ou July 2 b, 2009 and has Authority to Operate (A TO) 

t;<tv OS On tO 

Preside date of last C&A oortiliioatioo/re-oertiloadon: 


Confidentiality; 

_Low- 

_Moderate 

X 

High 

_IJndefhpb 

lotemity.; 

Low 

Mndemte 

X 

High 

Undefined 

■ s % uiHO ■ .., y 

Low 

X Moderate 


High 

Undefined 




























•Bl FTA: 


IIMCLABilflEMfOE OFFICIAL, USE ONLY 


Not aopikaMe “ das system is only paper-based. 


10, Is this Use sofefeet ofsst. 0MIU3CMI .feeOgetsttbmtsAoCI 

X MO 

vw.^wvw\w 

_YES If yes* please -prmM* fk$ 4$fa and muse or 

title of the OilB submission; 

11, Does foe system. eondeet dale mini Eg is deStfod in Section liM of the 
imeOmentlnt Reeonmteedetions of foe W!1 Commisstbo. Act of 2Sb7, If 
S3 (codified. at 42 U$C 200bceC,|? 

X MO 

YES If yes, please describe Urn dam Mining Emelina: 

12, Is tins a national security system (as determined by the Sedll)? 

X NO YES 


Is, Status of System'' PtomeE 

X I bis is a new system/ present 1st development, [If yen cheeked: this btoele, 
SLCIP, Tie FTA is now' eempiete and after division approvallm should be 

PI A and/or other actions are required,! 

IE. .EXISTING SYSTEMS / PROJECTS 


1. When was the sysiefMpteyect developed?: 


2, Has Site sysCsnintbieet uodetoone anv Mtoi&ani ehmlgeb since April 17, 2003? 


NO [If no, proceed to neat question (IO).J 


YES If yes, lobiMte which of tbe following clmtges were Involved (mark all 

_A eon version, front paper-baaed records to m eleetrotnc system, 

_ A change Item iolbrmahon. In a. format that is anonynmns or non- 

identifiable to a -format that is kkmiif table to pardeular individuals. 


liMCLASSlFIllE/tCM OFFICIAL USE ONLY 
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ALL FBI INFORMATION CQNTAIM1B 

HIREIN IS UNCLASSIFIED 

DATE 10-23-2014 BY N5ICG/C32W33B9-1 


mcummiBrnmom: 

mTmwmm sBcustiry operations ciMT|i.cisoQ 


COGC/rCUi (Rev. ttlMiff 

» privacy jmmm&m analysis cfta} 

(sgsFvgfepp Sis DOi iaiS&l Privacy (IPA.I) 


NAME Cl SYSTEM / PROJECT: S^wsiy 

| IterrmI Wmm 
| Gmdfiui Dy; 

I BedaPty Os: 



Nasues 


Ftogsasot Office: ESCC 
OAHop; SaciD 
Pk>De;i 


j FBI. OGC/ PCLU FOC: 
| Nimei .ACJC- I 
| i%oae { ~l 


I Kxkss Ntssvfeer: 7331 


llsqpl Memfter: JEO; 945W10674 | 

M DIVISION irtYIEMlMATE APP1CIVAOS 


| IVogmm Maesget (or Mher 
I executive m Dsvffioo 


I gppgispeo 


P»pa Div WM : i 
Secwitv Is v i s ffiss 


FBIMQ Dbs® : 

Security Dsvirieffi 




j Dlvfenon Frivwy Ofbosr 


AskiMi&mB divkk*&M apwmik m&v bo &4d#&« w&rroMod* 


b6 

b7C 


Skssats: 

sees /$/ 


| Sigstalwe: iW 



Ossie a 

pesi: 06/24:70 


1 Date sigasdh: 04/2 44A 



Name; | 



| Name: Mfcltsef F* Mot 

etas 

b6 

Title: 

Unit ClsieC. Se 

cD 

| titter DAD, Socomy l 

Mxkteo 

1 b7C 

Rights; 

d'0> ; ' /S/ 


\ Ssgrsaffire: 


i 

Date si 

gbb& 0S/24M 

& 

| Date sspsd: 



Name: 

Rpfet Cox 


\ Name: 



Title: S 

Isodon Cbkfl S 

0&D f AS 

I Title: 


V 


After &ii illvkkm ^prevnk> forward $!§«*! few! s*>§w pfw sopy fb FM OGCFIteXOIJK1I 

733% 

(The FBI Privacy Ml CM! Llker|l|| Offioodx odidteno% bfefeter &bl apfgsml will bs 

ronorded on the following pssige.) 
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ENTERPRISE FECBRITX OPERATIONS CENTER («SOC| 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


I PI A recurred:; X No 


Yes: 


SORN/SOEN revision txqum± No 


Applicable SORNiyl; 


xoofy fib mwmm m miog fio .it I no 


fYegmx/rev I seintd Privacy Act telp) statements for related _VAvibrms affected: 


| The pmgra® should constdt with RMD to Mvmtfyfmsfiv® any federal s^ords/eteronic records 
| Issues, 

^ RMD baa consulted wits RFID regarding Federal lesords/eleeRoole spools r««* RMD fens 
^ concluded that ESOC N not a system of record, 

| Other: To the extent a PlA may be deemed necessary for EEOC, It qua hues as a routine FBI database, 
I per tte etnwtsed check: 1st, A FIA Or FBI Routine Databases wee completed in August 2008. 

1 Since this system it concerned with, access kx end use oh FBI IT systems., it is wholly Internal to the 
1 FBI, 


While lie analysts perforated in FS0C may fee coostrned. as pnRcrss-bnscd dole. mining.: such 
activity is mi required to be reported to Congress under the Federal. Agency Data Mining Reporting Act. 
of 2CMI7, 'Fie Act does not extend to searches whose purpose k the protection of a government 
computer system. 42 U S.C. § OIOFecOtC) (11). 


1 David C, Larsen, Depute Getmm! Counsel I Signature: ,,../,, v .>•"'" . XT Y, 

y * S NW ““ ' w -v:" ^^Ss v .^%w^v\xss NN<n% <.\ n 

V^V ^.>'>- ^ x ' v 

>>yS$.WMWW^ 


| F 8 .I Privacy nod Civil liberties Officer | Date Sinned: 


II NCLASSI FtESAFOI J< 


cmr 




























iJNCLMSIFIEI>//rom 

NTfflPW SECURITY OPERATIONS C 


L Provide $ gtssr&I dtserlpiioi* of tht spitra or projtei ifap Iisekidot: si* of lilt spleim/propet 
Iiielsiiilog ossoeioiod aeroayow; sirutiwt of tie sysltiR/proJttlj purpose? nature of lilt Mfofi:^Mk>R 
III the mmm*i sad bsm- ft will lit »sed| who will Shave |e«eis to tin? inferisitilti: III the system sad flit 

msmeer of mygnkte to al u*m> (This kind ofmfomMtis 
Flan, If available., or Mro a. Coatopt of OperadMo doctmiem 


:c^m 


k§tea Mrej 


rhe immmnse 


mm cet 


pr 


ceeeue 


Be 


iMbrma&iiM mb 
;OC b C L,4SiIiIIeB 


: Aemsi Ai 


Mmsstd 


:ie tmctm oait m 


ssomta to to 


see 


:oe 




tiers perform abmimsirstr 
Users with so appropriate 


■meiptea. 


;ed-Rvk 


dp to omoroi mm 


V&v&i 


8p secBBSv epsmBsM e&m&o &$ iM 

i'i M tm|3?Qf>e? « sfFSl IT As usei & ike F 

W s&cwstv eeeier. 


‘s to tke sMlvtfc i>mee$s 




retrieve 




provide dot 

eedtm &od a 


Of 

iit 

tnt^bM -i 

md m b 

W$>e OU: i 


red, ipslo 

ms item^kou 

ike FI 

^MiextAiAe. | 











_ 
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1 j N€ LA SSI FIE IMFOtiO 
enterprise mmrnjY operations mmi 


Retpeits :for analysis of metadata Mfemiiffed by operational divisions (e,g,, the ComSeftMdligMee 
Division:) are individually reviewed «d re<|tt«t supervisory apprtwal, In fee event dial Ifibftahoo about 
metadata analyised by ESOC b disseminated outside of emeiprlae aeeuniy personnel* such difoernkumon 
Is made to perort 'with investigative respoostbiliN for FBI IT systeais m a to know basis. If 
actual metadata. is to bo used for investigative purposes, the eotnponent m voiced is retorted to tbo 
particular IT system cootehbu.a: tbo onninai data, There is no dissemination of ESOC data outside the 
Fill 

2, Does the syslem/projeet collects maintain, or disseminate My information iheut individuals m 
identifiable form, ie, 5 is Information linked to or linkable to specific individuals (which is tbe dcEnMon 
of personally Identifiable Information (PII))? 

NO> 


X YES.. Iff ves. please continue.’! 

Does the system/project pertain only to government employees, contractors. or consultants? 

X YES.. ! 




Since ESOC analyses metadata from FBI interna! IT systems, the metadata is limited to FBI 
employees, contractors or consultants with access to those systems, 

4 Is Information. about llidted States cldoens or lawfully admitted permanent resident aliens retrieved 
from ihefoysfom/pfoleet by name or other personal identifier? 

. NO. X (YES.. 

Metadata retrieved by ESOC may include the name or other personal identifier of FBI employees, 
contractors or consultants with access to I rl: t > systems. 

5. Are Social Seeority Numbers (SSNs) collected, mfonaiued or disseminated Irons the systcm/prpjeet? 
NO. X..YES, If ves, cheek af 


v.vwwtyw# 


X SSNs are necessary to esiabtlshfoonfttm the identity of subpefs, victims, witnesses 
or poorces m. this law ebforeeamni m intelligence activity, 

.X_8SNs are necessary s0 FBI pemorrnel in this internal 


SSNs are important reasons. Dose 

X 1Ye sysiendprojvCt provides special protection to SSNs te,g., SSNs are encrypted, 
hidden from all users via a look-ap fable, or only available to certain osotfo, Describe: 


l!M€LAiXiFIE!Y?Fi 
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IjNC'LASSlflllMFOUO 

enterprise security operations cmrmmm 


Only ESOC users conducting seamhes or analysis with specific needfeMoow may teeess SSNs, 

_ M/A _It is not feasible fa? th& system/project to provide special protection to SSNs, 

Explain; 


Does the system/project collect any iofemMiun directly fees the person who Is the subject of the 

.N_NO, flfno, proceed to question ?.] 

YES. 


a. Does the syiteodpecjeet sopped edndual, €T, or FCI tncesttgiioas or assessments’! 
l YES. |lf yes, proceed to question || 

NO, 



via a separate tioReel' 


NO, fTbe program will need to work with PC: Lll to develep/tmplemenl tie 
necessary form! s|, | 

.. .YES. I dentify mj forms, paper or electronic, used to request such 

Intertiatton from tie Information anbieett 


llosthe system tmdergone CertiEcatlou & Aecreditation : (C& A) fey tie FBI Security Di vision (SeeE 
NO, if no, indicate reason;; if CM A is pending, provide anticipated earn pi 


,...E YES, I fees, provide date of Inst CM .A ee rtlfteniion/rc-cer tifica tl o n j 

'lie ESOC network nod environments were roaectedited on Apri l 15,2001, 
Don’t Know. 


s tins tysiem/ptqfeet the subject of an ONflNSOK) budget submission? 


NO. 


Dent Enow. 



An OMB 300 for ESOC dated .April 25, 200S was ittomitted to OMII, 


CNCLARSrEllDEFCMjO 
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ENTERPRISE SECURITY OfeERATtCtNR CENTER (ESOC) 


!$ tMs a itaioml geamty system (as determfead fey the SecD)? 


NO. 


X YBS, 




Don't know. 


Status of System/ INojeef: 

_Tills is a mw system/ project la deveiopmeM* pf ps ctectel life Peck, ST0B, The 

ET A Is now com piste m& after division upproy«l|«| should fee lilwltlrf to RIM 
OGC/FCLIJ for fea t RS! approval m& if PI A ami/or otter act loos arc 

mjitrei 4 


When wasfeesystemtpp|eci developed:? October 1,2003. 

Has the aystem/pm|set undergone any significant changes sloes April 1?-. 2IMI3E 
___NO, [If 00 s proceed to oesf question. (IL3)4 


X YES, If ves, indicate which of fee fbtbwina chaoses wore Involved (mark, all hoses that 
sbM; 

A conversion from paper-based records to an electronic system. 


A change .from mfmmivm in a format that h wmwmms or tKawbeodiifeb to A 
kmmi that is ktenhfehtc to particular individuals. 

A new use of hi IT sv stem/protect, including application of a new technology, feat 
changes how fefbrmabon m identifiable form rlmsuageb, (For example, alfeange 
that would: create # more open envdonmeut and/or avenue for exposure of data fiat 
previously did not exist | 

A ehtapie feat, results in feionoatlon in kkntifkbk form befog 
or matched with other databases, 

A hew method ofafeherrlicatpg fee use of and access to ioisrmatloo in identifiable 
form by members of the public? 

A systematic incorporation of databases of kioooatloo. m identifiable form 
porehased or ofetatletl fk®. commercial or public sources, 

A new iutoraipucf use or shared aoeuev function that results in new uses or 
exchanges ol roMmatlou. In Identifiable form, 

A change that results In a new use or disclosure of Informationin identifiable form, 

A. efetmp; that results In new items of information In identifiable form helog added 
into the systen't/prpiccE 

JL„, Changes do not involve a chauge in the type of records mafotebted,. the mdrvkfoals 


yACLASilEllBEROHO 

4 
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immPMSB SRCUEJTV C1S0C) 


&& whom records see maintained, or did asa or dissemination of lolbrmaiioo. from 
die syAem/pr^eet 

Oilier. IPrrm&e brief os 


Technical tepfodcoieoisto BSOC lines Its Initial operation permit nmnlttmng and mmlysis of 
additional FBI IT systems sod databases. F!owcver, tie types of monitoring sod analysis performed by 
BSOC m IT systems md databases remains rmelmoeod. 


It Cods e FI A fee lid a systeodprp|eei olreody osisf? 

a Provide date/ikte of the FI 4: 


M0, 


X YES. fives: 


Enterprise Security Operations Center (ESOC) : , Mmm$ 25,2006. 
k Has the system/prp|eei «dcrgone any slgolfeeot elrs^gee since dm FI At_MO X YES 


A.s discussed In 112, septa, technical enhancements to ESOC since die 2006. F!A permit I 
moniiormg and ana lysis of additional FBI IT systems and databases.. However, the types of monhorbm 
and analysis performed by BSOC m IT systems and databases remains unchanged. 

[The FT A Is now complete and. alter division approval!b) skonld saknilded to FBI OClCFlXXll for 

final FBI approval and determination, if PI A and/or other actions are required >|. 


OMO .ASSSFlEIV/FOiJO 

sssssrrsssstst 
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FBI OGC/FCLU Form Rev. 9/15/08 


CHECKLIST FQm PRIVACY COMFLIAXCI FOB 

TIPs clteckisf m based m. tie Fill Privacy Impact Assessment t'FIA'I far FBI Ba&tfpt 
CfeBafeases of 4/7/OS as approved d/2W(A (l.ii~II<|'<; 1321204 Scrim! 432, WS/fffe Far {fee 
FIA, tfek efeeefelist may fee msed« Wm #f any additional PI A (nr PTAfe so teg m every « 
of the twelve blocks Item ere fee cheeked. This checklist sfeoald fee complete fey Ike 
database amnaiger far ether aftpropriaie offteiat/ as determined fey the division) aspi 
approved fey ifee IlivMon Privacy Officer. pf warranted, add classification fstartdopp 


A. Add date efeecMlM prepared:; May IS, 2i#f 

B* Freebie name and brief dmerlplten of database for comparable appieafefeap 

As used m this document, Efebergrlse Stcmiif Operations Center (BSOC) is a data 
wateouse monitefeg a taatste of connected FBI IT systems and databases. ESOC contains 
:mctadata and relate mM data (data about: warn accessing. data) fern these systems sad 


€, Ideality program division and oalfAtpadt 

feeearltv pivtdea. Information Asm.mm*t Section, EEOC 


I), Fr eekfc taa, addres s and tdio oe number of te nt of roof aek 

llEII/Iii74j 1 

- - fo/C 

El Checklist (oil roost fee cheeked as feeing accurate for this dotafease/opplleatioo); 


1. Information p the system Identifies individuals, either directly or indirectly. An 
Irtdlvtdoalcar be IdcMlfied indirectly through a combination of descriptors socit as 
getter, race, birth data, geographic indicate license anmfeot, or license plate naodw, 5 


2. lire system derives blbratodcr fmm FBI records covered. by existing Privacy Act 
system ofrecords polices regardless of tteaafin which 

those months arc maintained mdf®t fmm ialbrmatioo. that is ftttblkiy available at no cost 
(If information comes Bom FBI records that arc not coveted fey existing systems of 
records mokes, contact the FCLU,} 


. X_3, Neither commercial data nor paid subscription service data Is Inducted in the database 

unless that feiifemmtlon its derived, from existing FBI records. 


tte do infen&stte assed &§§ dh$£kB$£. 
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4„ The systern fee only by osernbers of 1 tarrhcoiar oi&e, unit, ®s|utd #.r 

otter similar FBI entity «1 soaring of Information is based strictly mm operational 


. to Mow. 


5. The system b nos used lot purpose® 0 f pattern-basod data mining. 


NOTE; White ESOC doe® search for, ml analyze, suspicions pattern! of IT system 
access and use, such. acti vity Is designed to delect possible espionage activity Involving 
FBI IT ®|mems, The. activity Is therefore related to the aeettrby of FBI IT systems and. 
eaeleded. from dte definition of mpokabk data mining, pursuant to 42 UvS,C § 20OOee- 
3(C)(iI).: 


_%_6. Initial and continued access to the system is subject to permission Mtdrols enforced 

by FBI supervisory personnel, use of access passwords. 

X 7, Access to the system can be audited, 

8s &,V^£ system Is pan' of an established platform mi which a Security C 
Accreditation haf bean primmed, 

.X.9> Tito system wis developed after April 17, 2CKI3. 

.X.10. If the system maintains information about II.S, oitlaens or legal geooaoeoi residents, 

it is covered bv a published Privacv Act Svstem of Records Notice, 


NOTE: To tie esient that ESiX; accesses or maintain! metadata concerning access and 
use of FBI IT systems that contains Information about U.S. Citizens or lawful permanent 
residents, such information formally resides In one or more FBI records systems covered 
by publishes! System of Records Notices. These systems include the Central Records 
System. (JtISTiCE/F8iA>d2}, the Efeeirorrk; Surveillance (BEStOf) Indices, 
lliSTICE/EM-'tMM, the Bureau Personnel Mmsagemeet System (BFMS, 111STICE/FBI- 
001), and the Terrorist Screening Records System (1'SRS, JflBTICE/FBI-OU), 


11, Records retention issue® have been discussed with the Eecord® Management 
Division. 

NOTE: EMP has been consulted regarding Federal meoolslelepmuk records issue® , 
ENID has advised that, since all the infbsnation in ESOC originates and resides in other 
FBI svstems. BSCXf is not a svstem of record.. 


X 12. Any personally identifiable inimbatlon placed on a mobile device or on media that 
1$ transported outside .FBI .taeilldes most comply with the FBI policy on encryption and. 
must fee password protected. 
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MOTE: ft Is not anticipated list FI I fmm 1S0€ will be placed on mobile devices m 
media that will fee transported outside of FBI Ifeci!Me«> In the went that PH Is placed on 
tnmnvaMn media, the m&nnatkm will fee encrypted. 

F» If a database (ttfn Information that May fee considered s«siliee|p«fre?ersltl m 
Is mainfafoed orpari: of a larger FBI program* foe database adndaistmtor or pregram 
manager Car divMoo privacy officer) most consult with foe $31*« Office of 
the General Clnunsel* Privacy and Ov.II Liberties Unit, about fie potential need fa 
assets tie privacy rlt ha In a separate PI A* 


CL Fie Metes isnmmaHee any adilflanal lafnmmtmn that may be warranted for 
retard purposes. e-tp, coordination with OGCfe etc.); 


The ESOC PTA and ibis checklist have been coordinated with AGC 


In. OGC/PCLiL Based an foe nature- of foe metadata in ESOC and Its ms in monitoring 
FBI IT systems and databases against Illegal nr ueamhorfernd use m connection wife, 
espionage activity, ESOC fens been determined in be a toedae FBI database. 

AP PROVING OF FI C I ALS 

f Program Manager for o 
j: official as division determinesi 


i Date Ngnea: 


i Name: 


| Tiller Program Manger 


b6 

b7C 


Division 

Priveev 

Sianaiun; 

' ;xv. : :-y : : : . 



sen: v y 

Name: M 

hcbael I 

Title: SecO DA 


BISTEIDOTIONt 

- File signed original (or copies) m one or more official divisfon/progmm flies for doeemenMfon 
Inspection, reentds, mid other §wsight purposes. 

- Forward copy to foe FBI Privacy arid Civil liberties Unit (PCLO) (1EI1 BIS). 











ftLL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS DNCLASSIFIED 

DATE 11-06-2014 BY NSICG/C32W33BS1 


(OGOPCHJ (Rev. 03/16/2010) 


(Equivalent to the DOJ Initial Privacy Assessment (IPA» 


NAME OF SYSTEM / PROTECTS_ 

BIKR FBI tlaikpe Asset IB: S YS-Q0Q0187. 


Iriueme: 

BeehMStlYOns 


SYST EM/PROJECT P OC 

Naine;_ 

Program Office: Data Intercept 
Technology Unit (DITU) 

Divisi on: Operational T echnology 

Phone ! ~l 

Room Number: ERFBLDG 2795S-A 


FBI occ/ potj POC 
Name: AGO I 

Phone|_| 

Room Number: 7350 JEM 


DIVISION INTERMEDIATE APPROVALS [complete as seec«rf ennsonnntwith Division pni«p| 


Program Manager (or other appropriate 

_ ; executive asDivision determines )_ 

Program Division: Signature; _ __ 

Data intercept Date s igned: cpY&f 

Technology Unit Name J I 

__ i Titiei Umt GhM DiTU __ 

FBIHQ Division: Signature: 

Operational Technology Date si gned; gmmaAL 

Division (DTD) Name;_ 

Title:«" Dm/ _ 


Division Privacy Officer 

Is: A 

... . . . . 


S.Umature: % i 

.Date- signed-; I $ 


VH-W ^ 

K, Voss ' 

TitlellUtlon miefi OTP . 

Signature; |/fjt 
Date signed: 

NamgijRjJC-Yoss 
Titlm^cfion ChieE, DTD 



idiiowmg plge;) 
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h BTfe wl 




FT A ffe FTA drhffee spall ship m ilm 

X _ PI A is required by the E-Government Act. 

__ PlA-is-to.be completed as a matter of FB1/D0J discretion, 

PIA Is not required for the following reason(s); 

System does not collect,, maintain, or disseminate PH. 

” System is grandfathered (in existence before 4/17/2003; no 
_ Information in the system relates to internal government op 
_ System has been previously 

No significant privacy issues (or privacy issues are unchanged). 
Other (describe):. 


Applicable SORNfs)‘ DOJ/FBEO02, Central 1 

Records Sy stem 

Notify FB3RMD/&IpS p^M10G 190,2.3? . . .. Nr 
htfy:://homMM.VOGG/L:Tfy / PCLIJ/tPrivacyCivi|%2! 

X Yes-See sample. EC on PCLU intranet website here : 
}Liberties%2dLilnnfy/fbnnjbr_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required?_No _J£_ 

separate SORN for intercepted, information. 

Yes (Imtkato revisions: needed): This system can he: covered in a 

Prepare/revise/add Privacy Act (e)(3) statements for r 

elated forms? X No Yes (indicate'fbnns affected): 




_ _ __ “ ~ -~i 

RFOORDS The program should eonsult with RMD to identify/resoive any Federal records/electronic records issues. 
The System may contain Federal records whether or not it contains Privacy Act requests and, in any event* a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as-well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 

Other: 




BrjaafSlfmey, (Acting) Deputy General Counsel and 
.• '"FBI Privacy and Civil Liberties Officer 

Signature: O'AhCbt/ ^ , f 

Date Signed: ' 4 fyfat'HZ-,- 
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2. Does the system/project collect maintain, or disseminate any information about 
indi viduals (Le,, a human being or natural person, regardless of nationality')? 


_MO |If m, STOP, llte FT A is now complete and alter division apprw«l(s) 

shottUI be submitted to PBI 0€€/PCLU for final FBI approval. IMfoss yon are: 
Otherwise aitvirodj iw FIA is retplretll 


3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals'. Bear in mind that log-on information may identify or be 
linkable to an individual. 


BMebmmmmtfmm 
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(Cheek all that apply.) 


X _The information directly identifies specific individuals. 

■ X The information is intended to be used, in. conjunction with other data elements, 

to indirectly identify specific individuals. 

Jg_The information can he used to distinguish or trace an individual ' s Identity (i.e.. it 

is linked or linkable to specific individuals). 


If you marked any of the above, 

Non© of the above. If none of the above, describe why the information does not 
identify specific individuals either directly or indirectly. [If yon cheeked ikfsffern, 
STO? here after providing the requested 


4, Does the system/project pertain only to government employees, contractors, or 
consultants? 


X 


YES 


5, Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved front the systeni/project by name or other personal identifier? 

NO. gif no, skip to question ?,j 

X YES, [If yes, proceed to the next question.] 

6. Does the; systeni/project collect any information directly from the person who is the 
subject of the information? 


NO [If no, proceed to question 7,| 


X YES 


a. Does the system/project support criminal, CT, or FGI investigations or 
assessments? 


NO 










prov 

separate notice)? 

__ KO fThe program will need to work with PCLU to 
the necessary fo rails). 

_YES Identify any forms, paper or electronic, used:to request such 

information from the information subject: 

7, Are Social Security Numbers (S$Ns) collected, maintained or disseminated from the 
system/project? Full SSNs. should only be used as identifiers in limited instances. 


NO 


X YES If yes, 


__ SSNs are necessary' to establish/confirm the identi ty of subjects, victims, 
witnesses or sources in this law enforcement or Intel ligence activity. 


SSNs are necessary to identify FBI personnel in this internal administrative 


system. 


SSNs are important for other reasons. Describe; 

__ The system/prqiect provides special protection to SSNs (e.g., SSNs are 
^irypted, hidden from all users via a loolt-up table, or only available to certain 
users). Describe: 


X It is not feasible for the system/projeet to provide special protection to 
SSNsT" 


.Esmlaim E 


8. Is the system operated by a contractor? 













9. 


_Yes, Information Systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard "contract clauses that must be included in the event the system 
collects, maintains or disseminates Pit and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system fox the FBI, 

Has the system undergone Certification & Accreditation (C. &A) by the FBI 
Security Division (SecD)? 


X _ NO If no, indicate reason; if C&A is pending, prov 

completion date: Pending. Note the C&A conducted f 
separate and apart .from the 0&A conducted for Insight-State Sc Local. 

YES 


jg, if known: 


Provide date of last C&A. certification/re-certillcation: 
Confidentiality:_Low_ 


Dow Moderate 


Availability: 

Not applicable - this system is only paper-based. 


ps 


10. Is this system/project the subject of an OMB-300 budget submission? 
X NO 


If yes, please provide the date and name or 
title of the OMB submission; 


11, Does the system conduct data mining as defined in Section 804 of the 

Implementing Recommendations of the 9/11 Commission Act of2007, P.L. 110- 
53 (codified at 42 DSC 2000ee-3)? 

X NO 


rifee the data mining function 


12, Is this a national security system (as determined by the SecOJ? 










13. Status of SysteM/ Project; 

X This is a new system,'' project in development, p i y en checked this block, 



PI,4 and/or ether actions are fetpdred«l 


IL EXISTING 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since 
>, proceed to next question (11.3),] 


il 17, 


YES If yes, indicate which of the following changes were kWolydd (mark all 
changes that apply, and provide brief explanation for each marked change) 

A conversion from paper-based records to an electronic system. 


A change If ora information In a format drat is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

A new use of an IT system/project, including application, of a new 
tichia!ogy s that changes bow information in identifiable form is managed. 
(Pur example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

A change that results in information in identifiable form 
merged, centralized, or matched with other databases. 

A new method of authenticating the use of and access to 


information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 


identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results In 
new uses or exchanges of information in identifiable form, 

A change that results in a new use or disclosure of information in 
identifiable farm. 





















_A change that results in new items of information in identifiable 

form being added into the system/project. 

Changes do not involve a change in the type Of records maintained, 
the individuals on wl 


3. Does a PI A for this system/project already exist? 
NO YES 

lives: 


b. Has the system/project undergone any significant changes since the PI A? 


NO 


|The FT Ala ®? cot 
FBI CIGOFCLH for f 
aeffoor are required; f 


te amt! after division approvalfs) should ho $n Noltietf to 
Fill approval and deterofinuifoo if FI A aedfor other 
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